Cookie policy.

A cookie is a small text file a website stores in your browser. Cookies are used for things like keeping you signed in, remembering your preferences, or, for many sites, tracking you across the web. We don’t do the last one.

We use first-party analytics cookies via Google Analytics 4 to understand which pages are visited, where visitors come from, and which content is useful. GA4 is configured with IP anonymisation and no advertising features. We also use Cloudflare Web Analytics for additional performance metrics, Cloudflare does not set cookies for analytics.

The cookies we set:

We don’t set advertising cookies, social tracking pixels, or third-party trackers. Forms (newsletter, booking, contact) submit directly to our API. They don’t store anything in your browser.

If you sign in to our internal hub (Nomad team, contractors, and authorised customers only), we set the minimum cookies needed for the sign-in to work:

• Session cookie , keeps you signed in for the duration of your session. HTTP-only, Secure, SameSite=Lax.
• CSRF token. prevents cross-site request forgery on authenticated actions.
• No marketing or analytics cookies on the hub.

We don’t embed third-party advertising trackers, ad pixels, or social share widgets on this site. Beyond Google Analytics (above), the third parties we use. Supabase, Vercel, Cloudflare, Google Workspace, Resend, and AI model providers, process data through APIs, not browser cookies. See the Privacy policy for the full subprocessor list.

You can block or clear cookies in your browser settings. Blocking GA cookies will not affect your ability to browse nomad.sc, we’ll simply have less aggregate data about which pages are useful. On the hub, blocking strictly necessary cookies will prevent sign-in.

We update this when we change something material. Last updated: 2026-05-27. If you have questions, email privacy@nomad.sc.