Cookie Policy

1. What this policy covers

This policy explains exactly what cookies and similar technologies Nanosoft uses on this site, what each one does, and how you can change your decision at any time. We have written it to align with the UK GDPR, the EU GDPR and the Privacy and Electronic Communications Regulations (PECR).

2. The three categories you can control

When you first visit this site you will see a cookie banner with three categories. The Customise panel lets you toggle the two non-essential categories on or off independently. By default the non-essential categories are turned off until you make an explicit choice.

2.1 Strictly necessary (always on)

Required for the site to function. These cannot be turned off because the site would stop working.

• Your admin authentication session (if you log in)
• Form submission protection (CSRF and rate-limiting tokens)
• Your saved cookie consent decision itself, stored inlocalStorageunder the key nanosoft.cookie-consent.v1

2.2 Analytics (off by default)

First-party traffic analytics that we run on our own infrastructure. No data is sent to third parties. When you accept this category we record:

• An anonymous random session identifier (a UUID, not linked to your name or email)
• The pages you visit on this site, the order you visit them in, and how long you spend on each page
• The referring site (e.g. google.com, linkedin.com) so we know where our visitors come from
• Your country, region and city, derived at the network edge from your IP address by our hosting provider Vercel
• Your device type, browser and operating system, parsed from the standard User-Agent header
• Your IP address, retained for no longer than 90 days. This is treated as personal data under UK and EU GDPR. We rely on your explicit consent (this category) and a legitimate interest in securing the site and detecting abuse. You can request deletion at any time using the contact details below

Our analytics never use cross-site identifiers, cookies, or fingerprinting. Your browser's "Do Not Track" signal is honoured server-side regardless of cookie consent.

2.3 Marketing (off by default)

Third-party tags used for advertising and conversion tracking. These are only loaded if you explicitly accept this category.

• Google Analytics (GA4) — first-party page-view and event data shared with Google for cross-property reporting
• Conversion pixels for paid advertising platforms (used only when an active campaign is running)

When you reject this category, no marketing tags are loaded into the page, and no requests are made to third-party advertising domains.

3. Cookie and storage details

4. Changing your decision

You can change your cookie preferences at any time using the button at the top of this page or the "Manage cookies" link in the site footer. Clearing your decision will re-show the cookie banner on your next page navigation. You can also clear your browser's storage for this site to reset everything.

5. Data retention

• IP address: 90 days
• Other analytics data (pages, durations, device): 24 months
• Cookie consent decision: 365 days, or until you reset it

6. Third parties

We rely on the following third parties to operate the site. Each only receives the data necessary for its function. None receive analytics data unless you accept the relevant cookie category.

• Vercel — hosting, edge network and basic delivery analytics. Categorised as strictly necessary.
• Supabase — database and admin authentication. Categorised as strictly necessary.
• Google Analytics — only loaded if you accept the Marketing category. Operated under Google's standard terms.

7. Your rights

Under the UK and EU GDPR you have the right to access, rectify, erase, restrict or port any personal data we hold about you, and to object to its processing. To exercise any of these rights, contact us at the address below. We respond to all requests within 30 days.

8. Contact