Cookie notice
Last updated 26 August 2026.
Nusan sets one cookie: a session cookie that keeps you signed in. We use no analytics cookies, no advertising cookies, no tracking pixels and no third-party tags.
Why we ask
Under regulation 6 of the Privacy and Electronic Communications (EC Directive) Regulations 2003, consent is required before storing or accessing information on a user's device, except where the storage is strictly necessary to provide a service the user has explicitly requested. Keeping you signed in while you move between pages of an account you asked to log into is exactly that exception, so the session cookie needs no consent.
Google Analytics is not that exception. It helps us, not you, so we ask first. The analytics tag is not loaded at all until you accept — we do not load it and then suppress it, because that would still contact Google. If you decline, no analytics cookie is set, no request is made, and the site behaves exactly the same.
Your choice is remembered for six months in a small cookie called nusan_consent, which stores only the word "accepted" or "declined". You can change your mind at any time using the button at the bottom of this page.
Analytics cookies, only if you accept
| Cookie | Set by | Purpose | Expires |
|---|---|---|---|
| _ga | Google Analytics | Distinguishes one visitor from another so we can count how many people visit and which pages they read. | 2 years |
| _ga_* | Google Analytics | Keeps track of a single visit so we can see which pages were viewed in the same session. | 2 years |
| nusan_consent | Nusan | Remembers whether you accepted or declined, so we stop asking. | 6 months |
We send Google a truncated IP address rather than your full one. We do not use Google Analytics for advertising, we do not run remarketing, and we do not sell or share the data with anyone.
This clears your saved choice and asks again on the next page you visit.
The cookie we set
| Name | Purpose | Type | Lifetime |
|---|---|---|---|
| nusan_sid | Holds a random session identifier so the server can recognise your signed-in session. It contains no personal data itself, only an opaque reference to a session record. | Strictly necessary | 30 days, or until you sign out or clear your browser, whichever is sooner. Signing out invalidates the session immediately. |
The cookie is set with the following protections:
- httpOnly — it cannot be read by JavaScript running in the page, which limits the impact of cross-site scripting.
- SameSite equal to Lax — it is not sent on cross-site requests initiated by other websites, which mitigates cross-site request forgery.
- Secure — it is only sent over HTTPS in production.
Other storage
The public marketing pages, including the free check tool, do not require a cookie to work, and browsing them anonymously sets nothing on your device.
Cookies set by Stripe
When you subscribe, you are taken to Stripe Checkout and to the Stripe Customer Portal, which are pages hosted by Stripe on Stripe's own domains. Stripe sets its own cookies there for payment functionality and fraud prevention, under Stripe's cookie policy rather than ours. We do not embed Stripe scripts on our own pages and we receive no cookie data from Stripe.
Managing cookies
You can block or delete cookies in your browser settings. If you block the nusan_sid cookie you will not be able to stay signed in, so the app will not work. The public marketing pages will still be readable.
Questions
Email hello@nusan.uk. For more on how we handle personal data, see our privacy notice.