Cookie Policy

This Cookie Policy describes which cookies and similar technologies Nanda uses, what they do, and how long they last. It sits alongside our Privacy Statement, which has the full picture of how we handle personal data.

What is a cookie?

A cookie is a small text file stored by your browser when you visit a website. Cookies help the site remember things like whether you are signed in, what preferences you have set, and (where you have consented) help the site owner understand how the site is used.

Cookies currently in use

Nanda currently uses only strictly necessary cookies. We do not currently run analytics, advertising, or third-party tracking cookies. If we add any in the future, we will update this list and request your prior consent where the law requires it.

Cookie	Category	Purpose	Duration	Party
_nanda_key	Strictly necessary	Phoenix session. Holds signed session data used to sign you in, maintain your login, and protect forms from CSRF.	30 days	First-party
_nanda_token	Strictly necessary (user-requested login)	Guardian "remember me" cookie that keeps you signed in across sessions when you asked to stay logged in.	30 days	First-party
nanda.consent	Strictly necessary	Stores the cookie-preference choices you made on our banner so we can respect them on future visits.	12 months	First-party

Managing your cookies

• Use the "Cookie settings" link in our footer at any time to review or change your choices.
• You can also block or delete cookies through your browser settings.
• Blocking strictly-necessary cookies will break sign-in and core site features.

Cookie-consent audit log

When you accept, reject, or customise cookie preferences, we store an anonymous record (timestamp, policy version, choices, browser user-agent, salted hash of your IP, locale) in our consent audit log. This is kept for 3 years so we can demonstrate to data-protection authorities that consent was captured lawfully. We never store your raw IP address.

Questions

Contact privacy@hinanda.com.