Cookie policy

Cookie policy at a glance

• We use required cookies/technologies for login, security, and core service operation.
• We use optional analytics cookies only when you allow analytics.
• Your analytics choice is stored in a consent cookie.

What are cookies and similar technologies?

Cookies are small text files placed in your browser. We also use local storage for certain session features (for example, kiosk sessions). In this policy, we refer to both as "cookies and similar technologies."

Cookies we use

Consent and preference cookie

• ts_analytics_consent: Stores whether analytics is accepted or rejected.
• Typical attributes: root-domain scope for .nomstash.com, Path=/, SameSite=Lax, and secure over HTTPS.
• Retention: up to 400 days.

Authentication and security technologies (required for app use)

• Nomstash app authentication uses AWS Amplify/Amazon Cognito session cookies and tokens.
• Auth cookie configuration in the app includes Path=/, SameSite=Strict, and up to 365 days expiry.
• These are required for sign-in and account security.

Base device identifier

• ts_base_device_id: Anonymous identifier used by our analytics wrapper and service telemetry flow.
• On marketing pages, this is persisted only after analytics consent is accepted.
• On the app surface, this may be used for core operation/reliability behavior.
• Retention: up to 400 days when persisted.

Optional analytics technologies

If you accept analytics, we use a first-party PostHog setup (via Nomstash domains) that may set additional analytics cookies or local storage entries (for example, PostHog persistence keys such as ph_*) to support product analytics and diagnostics.

Session recording remains disabled unless analytics consent is accepted.

Local storage used by kiosk mode

• nomstash_kiosk_session (local storage): stores kiosk session tokens needed for kiosk continuity.
• Used only in kiosk authentication flows.

How to manage your choices

• Use the consent banner to accept or reject optional analytics.
• Use browser settings to block or delete cookies.
• Clear site storage in your browser to remove local storage items.

Blocking required cookies/technologies can prevent login and core app functionality.

Updates to this policy

We may update this Cookie Policy from time to time. We will publish updates on this page.

Contact

Questions about cookies or consent: privacy@nomstash.com.