Cookie Policy

1. Introduction and Scope

1.1 Overview. This Cookie Policy (the «Policy») describes how Nelvoi Ltd («NELVOI», «we», «us», «our») uses cookies and similar technologies on our website at https://nelvoi.com (the «Site»), our applications (the «App») and the services provided through them (the «Platform»).

1.2 Acceptance. This site sets no cookies until you answer the consent banner, and none at all if you refuse. Using the Platform does not by itself constitute consent to anything beyond what is strictly necessary.

1.3 Relationship to the Privacy Policy. This Policy supplements and forms part of our Privacy Policy at https://nelvoi.com/privacy-policy, which describes how we handle personal data more broadly.

2. What Cookies Are

2.1 Definition. Cookies are small text files placed on your device when you visit a website. They are used to make sites work, to remember preferences, and to give operators statistics about use.

2.2 First-party and third-party. A first-party cookie is set by the site you are visiting; a third-party cookie is set by another company whose service is embedded in the page. We control the first, not the second.

2.3 Session and persistent. A session cookie exists only while your browser is open. A persistent cookie stays on your device until it expires or you delete it.

2.4 Similar technologies. Local storage keeps data in your browser like a cookie but with more capacity, and — unlike a cookie — it is never transmitted to the server with your requests. Web beacons, also called pixels or clear GIFs, are tiny images embedded in a page or email that report that it was opened. Scripts are code that makes a page interactive. We use local storage and scripts. We do not use web beacons or tracking pixels anywhere.

3. What This Site Actually Stores

The list below is complete as of the date at the top of this page.

nelvoi-consent — local storage, first-party. Remembers whether you allowed or refused analytics, so the banner does not reappear on every page. Set when you answer the banner. Kept for 6 months, after which we ask again. Strictly necessary: without it, refusing would have to be repeated on every page load.

_ga — cookie, third-party (Google). Distinguishes one browser from another so a returning visit is not counted as a new person. Set only if you allow analytics. Up to 2 years.

_ga_3L78QLDTKN — cookie, third-party (Google). Holds the state of the current visit: when it started and which pages were seen. The suffix is our Google Analytics property identifier and appears in the name by Google's design. Set only if you allow analytics. Up to 2 years.

There is nothing else. No session cookie, because there is no signed-in area yet. No security or bot-management cookie. No language or theme cookie. No live chat cookie. No advertising cookie of any kind.

4. What We Deliberately Do Not Use

4.1 No advertising or marketing cookies. We do not run advertising. Google's advertising permissions are switched off in our configuration permanently — not merely defaulted to off, but never requested, even from visitors who allow analytics. There is no Meta pixel, no Google Ads tag, no TikTok or LinkedIn tag.

4.2 No functional third-party embeds. No live chat widget, no social network buttons, no embedded video players. Fonts and icons are served from our own servers rather than a content delivery network — a font loaded from a third party reveals your visit to that third party on every page, without setting a single cookie.

4.3 No fingerprinting. We make no attempt to recognise a browser that has refused cookies by its fonts, canvas rendering, screen dimensions or any similar signal. Refusal means refusal.

4.4 Nothing sold. We do not sell or rent what analytics collects, to anyone, for any purpose.

5. Third Parties

5.1 Google Analytics is the only third-party service that receives anything about your visit, and only if you allow it. For visitors in Europe the service is provided by Google Ireland Limited. Google receives the page viewed, a truncated IP address and technical details of your browser. IP anonymisation is on and advertising features are off. Google's own privacy policy governs what happens on their side.

5.2 Consent Mode. Before you answer, and permanently if you refuse, Google's tag runs in a restricted state: it sets no cookies, stores no identifier, and sends at most an anonymous aggregated signal that a page was viewed. This is Google's own mechanism, which is why the tag can load at all without permission.

5.3 Hosting and network. Our hosting and network providers process requests to serve the site and keep standard server logs containing IP addresses for security and abuse prevention. These are not cookies, are not covered by the banner, and are described in the Privacy Policy.

6. Managing Your Choices

6.1 The banner. On your first visit you are asked to allow or refuse analytics. Both buttons are the same size and in the same place, because the law requires refusing to be no harder than accepting.

6.2 Changing your mind. Clear this site's cookies and site data in your browser settings for nelvoi.com; the banner reappears on your next visit. Your answer also expires by design after six months and we ask again — European regulators recommend re-asking at least once a year, and we chose twice as often.

6.3 What happens when you refuse. Analytics stops, and any _ga cookie left from a previous visit is deleted at that moment rather than left to expire on its own. Without that, a refusal would be only partly effective — Google's mechanism stops writing new cookies but does not remove an existing one, which could otherwise sit in your browser for two years.

6.4 Browser settings. Every browser can block cookies for a specific site or for all sites, and can clear them on exit. Because nothing essential to this site is stored in a cookie, blocking them entirely does not break it. Blocking JavaScript also works: animations stop and the pages still render in full.

6.5 Opting out of Google Analytics directly. Google publishes a browser add-on that blocks its analytics on every site you visit, at https://tools.google.com/dlpage/gaoptout.

6.6 Do Not Track and Global Privacy Control. Analytics is off by default for everyone here, so both signals arrive at a site that has already assumed refusal. If you have GPC enabled and then click «Allow», we treat your explicit click as your current wish, because it is more recent and more specific than a browser-wide default.

7. Legal Basis

7.1 Under the GDPR. The consent entry in local storage is strictly necessary — it exists only to record and honour your choice — and is processed on the basis of our legitimate interest in not asking you the same question repeatedly. Analytics cookies are processed solely on the basis of your consent, which you may withdraw at any time as described in Section 6.

7.2 Under the CCPA and CPRA. Some analytics configurations count as «sharing» personal information under Californian law. Ours does not: advertising features are disabled and no data is passed to advertising audiences. We do not sell or share personal information as those terms are defined in that law. You may still refuse analytics through the banner.

7.3 Privacy Policy. Your wider rights over personal data, and how to exercise them, are set out in the Privacy Policy.

8. International Transfers

8.1 Where data goes. If you allow analytics, data may be processed by Google outside your country, including in the United States, where data protection law differs from your own.

8.2 Safeguards. Such transfers rely on the safeguards the law provides — an adequacy decision where one applies, or standard contractual clauses approved by the relevant authority, together with the additional measures those clauses require. If you refuse analytics, no such transfer takes place.

9. Changes to This Policy

9.1 Modifications. We may update this Policy to reflect changes in what we use, in technology or in the law. The date at the top changes with it. Where a change means new data is collected, this page is updated before the collection begins, and consent is asked again where the law requires.

9.2 Versions. We keep previous versions for at least five (5) years. A previous version is available on request to [email protected].

10. Contact

Cookie and privacy questions: [email protected]

General support: [email protected]

Entity: Nelvoi Ltd. The registered address will be published here and in the footer of the Site before accounts open.