Cookie policy
Last updated
Every cookie and browser storage entry this website uses, what each one is for, and how long it lasts. Nastar runs its own consent banner on this site, so the choices described here are the ones you actually control.
What this page covers
This policy is about nastar.dev — our own website and dashboard. It is not about the cookies on websites that have installed Nastar; each of those sites publishes its own policy, and the last section explains the difference.
"Cookies" here means cookies and the equivalent browser storage technologies, including local storage. The distinction matters for accuracy, so the tables below say which is which.
The two categories on this site
Nastar's banner on this site offers exactly two categories, which is all this site actually uses:
- Necessary — required for the site and dashboard to work. Always active, and not something you can switch off, because without it you could not stay signed in or have your consent choice remembered.
- Analytics — optional. Off until you accept it. If you reject it, or close the banner without choosing, nothing analytics- related is loaded at all.
Optional storage stays blocked whenever consent is unknown, withdrawn or cannot be read. That is a deliberate property of the Nastar SDK: it fails closed, so a missing or broken configuration results in no tracking rather than in tracking by default.
Necessary storage
| Name | Type | Purpose | Expires |
|---|---|---|---|
nastar_session | Cookie (first party) | Keeps you signed in to the dashboard. Set only after you sign in. It holds a random token; the server stores only a hash of it, never the token itself. Marked HttpOnly, Secure and SameSite=Lax, so scripts cannot read it and it is not sent on cross-site requests. | 30 days, or immediately when you sign out |
nastar_consent_<site key> | Local storage (first party) | Remembers the consent choice you made in the banner, and an anonymous identifier generated in your browser. This is local storage, not a cookie — it is never sent to a server automatically with a request. Without it the banner would ask you again on every page. | Until you clear it, or your choice becomes outdated |
Analytics storage
We use Google Analytics 4 to understand how this website is used. It is loaded only after you accept the analytics category. Until then, no Google script is fetched and no analytics cookie exists.
| Name | Type | Purpose | Expires |
|---|---|---|---|
_ga | Cookie (Google Analytics) | Distinguishes one browser from another so repeat visits are not counted as new people. Set only after you accept analytics consent. | 2 years |
_ga_LEM8124XXW | Cookie (Google Analytics) | Keeps session state for this specific Google Analytics property. Set only after you accept analytics consent. | 2 years |
Google Analytics runs here under Google Consent Mode. Before you decide, analytics_storage is denied, and it is granted only when you accept. If you later withdraw consent, it is set back to denied and measurement stops.
Withdrawing consent stops further measurement and prevents new cookies being set. It does not retroactively delete data already collected, and a cookie already written stays in your browser until it expires or you clear it — your browser's settings can remove it immediately. We would rather state that plainly than imply a clean undo that no consent tool can actually deliver.
What this site does not use
- No advertising or remarketing cookies.
- No social media tracking pixels.
- No cross-site or third-party profiling.
- No device fingerprinting.
- No Google advertising signals —
ad_storage,ad_user_dataandad_personalizationare not mapped to any category on this site, so they are never granted.
Changing or withdrawing your choice
Use the Privacy settings button in the corner of the page to reopen the preference dialog at any time. You can change any optional category or withdraw consent entirely, and the change takes effect immediately.
You can also clear cookies and local storage for this site in your browser settings, which resets your choice — the banner will then ask you again on your next visit.
Cookies on websites that use Nastar
If you arrived here from a Nastar banner on a different website, that website decides which categories and services it offers, and it is responsible for its own cookie policy. We are its processor, not the controller of its visitors' data.
What Nastar stores on that site is the same as here: one local storage entry, nastar_consent_<site key>, holding the choice and an anonymous identifier that is never linked to a person or shared between sites.
Nastar does not automatically block every cookie a website sets. It controls the services a site has actually connected to it. Any other script that site loads is the site owner's responsibility — we will not claim otherwise.
Questions
Write to [email protected]. See also our privacy policy for what we do with personal data more broadly.