How choices work
The first-party selector offers Accept all, Reject optional, and Manage preferences. Necessary storage remains enabled; analytics is optional. We do not show a marketing category because no marketing tracking is introduced by this design.
We remember a choice for six calendar months and ask again after expiry or a material purpose change. Changing your mind is as easy as reopening Cookie settings. Rejecting analytics does not disable purchases or downloads. If browser storage is blocked, the choice may last only in the current tab.
Necessary first-party storage
__Host-nfi_session (nfi_session in local development) is the authentication cookie. It is HttpOnly, uses a 30-day session lifetime, and can be renewed during use. Signing out clears the browser cookie.
nfi_guest_order is an HttpOnly cookie for a verified guest order session. It expires with that guest access link and is necessary to authorize protected downloads. The actual expiry is shown on the guest order page.
nfi-manuals-cart-v1 is local storage containing product identifiers and quantities for the cart. It stays until checkout clears the cart, you remove items, or you clear browser storage; it has no automatic time-based expiry.
nfi_cookie_consent is local storage containing the preference version, analytics choice, saved time, and six-month expiry. An expired record may remain physically in storage but is no longer accepted as consent.
Temporary security and access tokens are used in protected service requests and links. These are necessary for delivery, not advertising identifiers. Do not share private links.
Optional Google Analytics storage
Only after acceptance and activation of our consent-gated integration, Google Analytics may set _ga and _ga_* first-party cookies to distinguish visits and maintain session measurement. Our configuration limits their duration to 180 days without extending it on each visit. Google is the analytics provider.
nfi_analytics_landing_path and nfi_analytics_traffic_source use session storage for an allowed public route and a broad traffic-source category. nfi_purchase_* uses session storage to reduce duplicate purchase events within that tab. Session storage normally ends when the tab or browser session ends.
We disable automatic page reporting and send explicitly allowed, sanitized events. No optional analytics script, analytics-session storage, or purchase marker is intentionally created before consent. Private page paths, query strings, email addresses, and access tokens are excluded from our event payloads.
Withdrawal and browser controls
Rejecting or withdrawing stops future analytics from this site and attempts to clear first-party _ga, _ga_*, _gid, _gat* cookies and nfi_analytics_* and nfi_purchase_* storage, including older versions. Browser restrictions may limit removal of some provider-managed storage. Withdrawal does not recall data already sent.
You can also inspect, block, or clear cookies and local/session storage in your browser. Blocking necessary storage may prevent sign-in persistence or saving the cart across visits. Clearing consent storage causes the selector to ask again.
Other services
Stripe Checkout operates on Stripe's pages and uses storage needed for payments, security, and fraud prevention under Stripe's policies. Social networks and other external sites apply their own policies after you follow a link. We do not embed their social feeds by default.
For questions about storage or privacy, email [email protected]. See our Privacy Policy for data use, providers, retention, and rights requests.