← NowMatters Official

Template — not legal advice. This is placeholder boilerplate to be reviewed and completed with qualified counsel before launch. Replace every [bracketed] value.

Cookie Policy

Last updated: [DATE]. This is a draft to be reviewed by counsel before publishing.

1. What cookies are

Cookies are small text files stored on your device. We (and our providers) use cookies and similar technologies (e.g. local storage) for the purposes below. “Essential” cookies are required for the service to function; the others are non-essential.

2. Cookies we use

  • Essential — authentication & security: a session cookie set when you sign in (Auth.js) so you stay logged in, plus anti-abuse/rate limiting. Cannot be switched off.
  • Essential — your cookie choice: nordic-lms-cookie-consent remembers whether you accepted or declined analytics (stored for 12 months).
  • Essential — error & security monitoring: when something goes wrong we capture diagnostic data (via Sentry) to keep the service secure and reliable. This sets no advertising cookies and cannot be switched off.
  • Preferences: your light/dark theme and small UI settings (e.g. stored in local storage), so the site remembers how you like it.
  • Analytics (non-essential): Vercel Analytics and our self-hosted Umami analytics measure aggregate, privacy-friendly usage (page views, performance). They load only after you accept in the banner — off by default — and you can withdraw consent anytime via “Cookie settings” in the footer.
  • Attribution (non-essential): nordic-lms-attribution remembers how you first found us (campaign tags and the referring site, stored for 90 days). It is set only if you accept analytics, and declining or withdrawing consent removes it.
  • Referral (functional): nordic-lms-referral is set only when you arrive through a coach's referral link (a ?ref= address) and holds just that academy's public name for 90 days, so the coach who invited you receives the reward we promised them. It contains nothing about you and is not used for analytics or advertising.
  • Invitation (functional): nordic-lms-sref is set only when you arrive through a student's invite link (a ?sref= address) and holds just a random code identifying that invitation for 90 days, so the person who invited you receives the reward their academy promised them. It contains nothing about you, is readable only on that one academy's address, and is not used for analytics or advertising.
  • Payments: when you check out, our payment provider Stripe may set cookies to process the transaction and prevent fraud.
  • First-party learning analytics: we record some activity (e.g. pages visited, article/video views) in our own database to run the academy and give coaches aggregate insight. [CONFIRM LEGAL BASIS — legitimate interest vs consent — WITH COUNSEL FOR YOUR REGION.]

3. Your choices

When you first visit, a banner lets you Accept or Decline non-essential analytics. Analytics stays off until you accept, and you can change your choice anytime via “Cookie settings” in the footer (or by clearing the nordic-lms-cookie-consent cookie). Blocking essential cookies may stop the service from working.

4. Changes & contact

We may update this policy as our tools change; material updates will be posted here. Questions: [PRIVACY EMAIL]. See also our Privacy Policy.