This policy explains the cookies and similar technologies (such as your browser’s local storage) that nimanto.com and the invitations, cards and event pages we deliver use, and how you can control them. It is part of our Privacy Policy.
What cookies are
A cookie is a small file a website stores in your browser so it can remember something between pages or visits. Local storage does a similar job but is read only by our pages in your browser, not sent to our servers. A cookie set by nimanto.com is a first-party cookie; one set by another company’s service on our page is a third-party cookie. Session cookies end when you close the browser; others last for the time shown below.
Your choice
When you first visit, a banner asks whether you accept analytics cookies. “Essential only” keeps only the strictly necessary and functional items below. “Accept all” also lets Google Analytics run. Until you answer, Google Analytics does not load and no request goes to Google. You can change your answer at any time; choosing “Essential only” later stops Google Analytics and removes its cookies.
If your browser sends a Global Privacy Control signal, we treat it as “Essential only”: Google Analytics stays off and the banner does not offer it.
Guests opening an invitation, card or Event Hub page are not asked, because nothing is tracked there without an answer given elsewhere on our site.
Strictly necessary
These make the site work and keep it secure, so they cannot be switched off in the banner. They are never used to track you.
| Name | What it does | How long |
|---|---|---|
| authjs.session-token (__Secure- on https) | Keeps you signed in | 30 days, renewed while you use the site |
| authjs.csrf-token (__Host- on https) | Protects sign-in forms from cross-site forgery | Session |
| authjs.callback-url | Returns you to the page you were on after signing in | Session |
| __Secure-authjs.state, .nonce, .pkce.code_verifier | Secures Sign in with Apple and Google while it completes | 15 minutes |
| nm-consent (cookie and local storage) | Remembers your cookie choice | 180 days |
| pe_<event> | Holds your pass for an Event Hub event on this device | Until 30 days after the event |
| nimanto_stripe_connect | Secures an organizer's connection to Stripe for payouts | 30 minutes |
| nm-embed-<kind>-<id> | Keeps the Nimanto app's in-app screens signed in | 30 minutes |
Functional
These remember choices you made so you do not have to make them again. They stay on this device and are not shared with anyone.
| Name | What it does | How long |
|---|---|---|
| nim-country | Remembers the currency you picked for prices | 1 year |
| nref | Remembers the partner link you arrived from, so its discount applies at checkout | 90 days |
| Local storage: nm-offer, nm-banner-dismissed, nm-passkey-nudge | Remembers that you saw or closed an offer, banner or tip | Until you clear site data |
| Local storage: nm-elli-conv, nm-elli-off | Reopens your last conversation with Elli, or keeps Elli hidden | Until you clear site data |
| Local and session storage: planner and to-do keys (nm-calendar-planner, planner-seating-look, nm-finish-todo-*, nm-planner-*) | Remembers views and steps you chose in the Planner and dashboard | Until you clear site data (session storage: until the tab closes) |
Analytics (only with “Accept all”)
Google Analytics helps us understand, in aggregate, which pages are used and where people get stuck. We run it with Google’s advertising features and signals turned off, it does not run in the invitations and pages we deliver to guests or inside the Nimanto app, and we do not use it to build profiles of you. See how Google uses data from sites that use its services.
| Name | What it does | How long |
|---|---|---|
| _ga | Google Analytics: tells visits apart to count how the site is used | Up to 13 months |
| _ga_<id> | Google Analytics: keeps the state of a visit | Up to 13 months |
Advertising
None. We do not use advertising, retargeting or cross-site tracking cookies or pixels, and we do not sell or share data for advertising.
Content from other services
A host can add a Google Maps map or music from YouTube to an invitation. When a guest opens that invitation, the map or player loads from Google, which may set its own cookies under Google’s privacy policy. YouTube music plays through its privacy-enhanced mode (youtube-nocookie.com). Paying by card opens Stripe’s or Razorpay’s checkout, which uses its own cookies to prevent fraud. Fonts are served from our own servers, so no font request goes to Google.
The Nimanto app
The app does not use advertising identifiers and does not track you across other companies’ apps or sites. It keeps your sign-in and settings on the device, and records first-party usage events tied to a hashed device id, which you can switch off in the app’s settings.
Controlling cookies in your browser
Besides the banner, you can see, block or delete cookies in your browser’s settings: Chrome, Safari, Firefox, Edge. Blocking strictly necessary cookies will stop you from signing in. You can also install the Google Analytics opt-out add-on.
Changes and contact
We update this list whenever we add or remove a cookie, and show the date above. Questions: [email protected].