Cookie Policy

What this covers

This policy explains the cookies and similar storage that nubosuite.tech and the Nubo apps use.

This website (nubosuite.tech)

We do not use advertising cookies on this website. The website sets the following functional storage, only when you act (analytics is covered in the next section):

• nubo_locale (cookie): remembers the country or language version of the site you chose, or that you dismissed the suggestion banner. It is set only when you click a choice, lasts one year and is not used for anything else. An older cookie of the same purpose, nubo_region, is still read if your browser has it, but is no longer set.
• nubo_auto_locale (session storage): when the home page sends you to your country version on its own, this short note (which version you came from and went to) is kept until the next page has read it, and then deleted. It is written only when website analytics is switched on, and never if your browser sends Global Privacy Control or Do Not Track.
• nubo_analytics (local storage): your analytics choice (accepted or declined), described in the next sections.
• nubo_sticky_closed (session storage): remembers for the current browser tab that you closed the contact bar on phones. It disappears when the tab is closed.

If you are signed in to Nubo, your browser also sends your Nubo session cookie (nubo_session) to nubosuite.tech, because it is set for all nubosuite.tech addresses. Our network edge uses its presence only to send you from the home page to your Nubo Home. We do not read it for any other purpose.

To suggest a country version, our edge network uses the country Cloudflare derives from your IP address for that request. We do not store it.

Forms on this website (contact, partners, security review and newsletter) use Cloudflare Turnstile to tell people from bots. It loads from challenges.cloudflare.com when a form is shown, and Cloudflare may use browser storage of its own to run the check.

Analytics (Google Analytics)

We use Google Analytics 4, a service of Google LLC, to count visits and understand which pages, products and buttons are used, so that we can improve the website. The Google code is loaded from googletagmanager.com, either directly (gtag.js) or through Google Tag Manager; the visitor sees no difference. It loads under the same conditions as Microsoft Clarity below, with the same single choice:

• When it loads. If you are on the UK version of this site, or your browser reports a time zone in Europe, Google Analytics does not load, and no cookie is set, until you choose Accept on the notice at the bottom of the page. Elsewhere it loads when you open the page. If your browser sends Global Privacy Control or Do Not Track it is not loaded at all. Use “Cookie settings” in the footer to change your mind: Declining switches Google Analytics off and we delete its cookies from your browser.
• Consent Mode. We tell Google your choice through Google’s Consent Mode: analytics storage is “granted” only when the rules above allow it. Advertising storage, advertising user data and ad personalisation are always “denied”: we do not use Google Analytics or any Google product for advertising, and Google signals and advertising personalisation features are switched off.
• Cookies Google Analytics sets (per Google’s documentation at support.google.com/analytics/answer/11397207): _ga (first party, up to 2 years, distinguishes users) and _ga_<container id> (first party, up to 2 years, keeps the session state). Google documents no other cookies for Google Analytics 4 on a site like this one.
• What we collect. Page views and events such as clicks on buttons, form submissions (only that a form was sent and its topic or team-size choice, never what you typed), and the country version and currency of the page. We also record how fast the page loaded and responded (Core Web Vitals), how far down a page you scrolled, the kind of website you came from (a search engine, an AI assistant, social media or another site: only the website name, never the page address or search words), and the type of script error if one occurs (never its message). We do not send names, email addresses, phone numbers or message text to Google Analytics. Google states that Google Analytics 4 does not log or store IP addresses.
• How long. We set Google Analytics to keep event-level data for 14 months, after which it is deleted.
• Opting out. Decline on the notice, use “Cookie settings”, send a Global Privacy Control or Do Not Track signal, or install Google’s opt-out browser add-on: tools.google.com/dlpage/gaoptout.

Analytics (Microsoft Clarity)

We use Microsoft Clarity to see how visitors use this website: which pages are read, where people click and scroll, and anonymised recordings of visits, so that we can fix confusing pages. Clarity is run by Microsoft Corporation and loads from clarity.ms.

• When it loads. If you are on the UK version of this site, or your browser reports a time zone in Europe, Clarity does not load, and no cookie is set, until you choose Accept on the notice at the bottom of the page. Elsewhere it loads when you open the page. Your choice is kept in your browser (nubo_analytics in local storage).
• Signals we honour. If your browser sends Global Privacy Control or Do Not Track, Clarity is not loaded at all.
• Changing your mind. Use “Cookie settings” in the footer at any time. Declining removes Clarity’s cookies and stops further recording.
• Forms are masked. What you type into a form on this website is not shown in recordings: Clarity masks input fields, and we mark our forms as masked.
• Cookies Clarity sets (per Microsoft’s documentation, updated October 2026): _clck (first party, keeps a pseudonymous Clarity user ID), _clsk (first party, joins page views into one recording) and the third-party cookies CLID, ANONCHK, MR, MUID and SM. Microsoft describes MUID as identifying unique web browsers visiting Microsoft sites, used for advertising, site analytics and other operational purposes; it describes ANONCHK as always 0 for Clarity, which does not use Microsoft’s advertising ID. We do not use Clarity data for advertising.
• How long. Microsoft keeps recordings for 30 days (recordings we mark as favourites, and a random sample, for up to nine months). Clarity locates visitors by IP address; Microsoft’s privacy statement describes how it handles this data and says Clarity acts as a data controller for it.

Analytics (Ahrefs Web Analytics)

We also use Ahrefs Web Analytics, loaded from analytics.ahrefs.com, to count visits and see which pages and sources bring visitors. By Ahrefs’ own description it sets no cookies and does not collect personal data by default; it records the page address, the referring site and the browser’s user-agent text, with each data point limited to a single device, a single website and a single day. It is loaded under the same rules and choice as Clarity and Google Analytics (see above): never with Global Privacy Control or Do Not Track, and on the UK version or in a European time zone only after you accept. “Cookie settings” in the footer changes your choice; a change takes effect on your next page load.

Nubo apps

Strictly necessary cookies keep you signed in and protect your account: your session cookie, which lasts 30 days, and a device cookie that remembers a device you trust for two-step verification, which also lasts 30 days. Local storage in your browser holds settings such as theme. These are needed for Nubo to work and cannot be turned off in the app.

What we do not use

We do not use advertising cookies and we do not sell data to ad networks. We do not use Clarity or Google Analytics data for advertising.

Your choices

You can clear cookies and site storage in your browser at any time. This signs you out and forgets trusted devices. Blocking all cookies will stop sign-in from working.

Contact

Questions: support@nubo.email.