Skip to content
Legal

Cookie notice

Last updated 25 August 2026.

Nusan sets one cookie: a session cookie that keeps you signed in. We use no analytics cookies, no advertising cookies, no tracking pixels and no third-party tags.

Why there is no cookie banner

Under regulation 6 of the Privacy and Electronic Communications (EC Directive) Regulations 2003, consent is required before storing or accessing information on a user's device, except where the storage is strictly necessary to provide a service the user has explicitly requested. Keeping you signed in while you move between pages of an account you asked to log into is exactly that exception. Because our only cookie is strictly necessary, we do not need a consent banner and we do not show one. If we ever add analytics or advertising cookies, we will ask for your consent first, before those cookies are set, and this notice will change.

The cookie we set

Name Purpose Type Lifetime
nusan_sid Holds a random session identifier so the server can recognise your signed-in session. It contains no personal data itself, only an opaque reference to a session record. Strictly necessary 30 days, or until you sign out or clear your browser, whichever is sooner. Signing out invalidates the session immediately.

The cookie is set with the following protections:

  • httpOnly — it cannot be read by JavaScript running in the page, which limits the impact of cross-site scripting.
  • SameSite equal to Lax — it is not sent on cross-site requests initiated by other websites, which mitigates cross-site request forgery.
  • Secure — it is only sent over HTTPS in production.

Other storage

The public marketing pages, including the free check tool, do not require a cookie to work, and browsing them anonymously sets nothing on your device.

Cookies set by Stripe

When you subscribe, you are taken to Stripe Checkout and to the Stripe Customer Portal, which are pages hosted by Stripe on Stripe's own domains. Stripe sets its own cookies there for payment functionality and fraud prevention, under Stripe's cookie policy rather than ours. We do not embed Stripe scripts on our own pages and we receive no cookie data from Stripe.

Managing cookies

You can block or delete cookies in your browser settings. If you block the nusan_sid cookie you will not be able to stay signed in, so the app will not work. The public marketing pages will still be readable.

Questions

Email hello@nusan.uk. For more on how we handle personal data, see our privacy notice.