Last updated: April 1, 2026
Cookies are small text files placed on your device (computer, tablet, or smartphone) when you visit a website. They are widely used to make websites work more efficiently, remember your preferences, and provide information to site operators about how visitors use their sites.
Cookies are set by the website you visit (first-party cookies) or by other services providing functionality on that website (third-party cookies). Some cookies remain on your device only for the duration of your browser session (session cookies); others persist for a defined period after your session ends (persistent cookies).
Beyond cookies, we may also use similar technologies such as web beacons (transparent pixel images embedded in web pages or emails), local storage objects (similar to cookies but storing data locally in your browser), and pixel tags to collect usage information. This policy covers all such technologies collectively referred to as "cookies."
This Cookie Policy applies to cookies set on the Nossa Data website at nossadata.org and within our cloud-based ESG reporting platform (the "Service"). It should be read alongside our Privacy Policy, which provides broader information about our data practices.
Essential cookies are strictly necessary for the website and platform to function. They enable core features such as security, session management, network routing, and access to authenticated areas of the platform. These cookies cannot be disabled because the Service would not work properly without them.
Examples of essential cookie functions include:
Analytics cookies help us understand how visitors use our website and platform. They collect information about which pages are visited most often, how long users spend on pages, error messages encountered, and where visitors navigate from. The data collected by analytics cookies is aggregated and anonymized; it does not identify individual users.
We use this information to improve the content, structure, and functionality of nossadata.org and the platform. For example, analytics data may show us that users frequently abandon a particular workflow step, prompting us to simplify it.
Performance cookies collect information about how the Service performs in different environments. This includes page load times, JavaScript errors, API response latency, and browser/device compatibility issues. Performance data helps our engineering team proactively identify and resolve technical problems before they impact more users.
Performance cookies do not collect information about your identity or the content of your ESG data. They are focused on the technical behavior of the application.
Functional cookies allow the website and platform to remember choices you make and provide enhanced, personalized features. These may include:
Disabling functional cookies will not prevent you from using the Service, but some personalization features will not work and you may need to re-enter your preferences each session.
Some cookies on nossadata.org and within the platform are set by third-party services that we use to provide functionality. These third parties have their own privacy and cookie policies, which we encourage you to review.
We use Google Analytics, provided by Google LLC, to analyze website and platform usage. Google Analytics sets cookies to distinguish unique users, track session activity, and measure the effectiveness of content. Data collected by Google Analytics is transmitted to Google servers in the United States and processed in accordance with Google's Privacy Policy.
We have enabled IP anonymization in our Google Analytics configuration, which means the last octet of your IP address is masked before storage. We do not use Google Analytics Advertising features (Remarketing, Demographics, or Interests Reports).
You can opt out of Google Analytics tracking across all websites by installing the Google Analytics Opt-out Browser Add-on.
We use HubSpot, Inc. for marketing analytics and contact form processing on nossadata.org. HubSpot cookies track visitor activity on our website, associate web visits with known contacts, and support our marketing and sales workflows. Data collected by HubSpot is processed in accordance with HubSpot's Privacy Policy. HubSpot cookies are only active on the public marketing website, not inside the authenticated platform.
Stripe, Inc. sets cookies in connection with payment and checkout flows. Stripe cookies are used for fraud prevention, security verification, and remembering payment method preferences. Stripe cookies are only active on pages where payment functionality is presented (checkout, billing settings). Stripe processes data under its own Privacy Policy and is PCI-DSS Level 1 certified.
We use Intercom, Inc. for in-platform live chat and customer support. Intercom sets a cookie to identify returning users, maintain chat session state, and serve the chat widget. Intercom cookies are only active inside the authenticated platform. Intercom processes data under its own Privacy Policy.
The following table lists the specific cookies currently set by Notre Data and our key third-party providers:
| Cookie Name | Provider | Category | Purpose | Expiry |
|---|---|---|---|---|
nd_session |
Nossa Data | Essential | Authenticates your platform session and maintains login state | Session (expires on browser close) |
nd_csrf |
Nossa Data | Essential | CSRF protection token to prevent cross-site request forgery attacks | Session |
nd_consent |
Nossa Data | Essential | Records your cookie consent preferences to avoid showing the consent banner on repeat visits | 12 months |
nd_lb |
Nossa Data | Essential | Load-balancer routing cookie ensuring your requests are directed to the same server during a session | Session |
nd_prefs |
Nossa Data | Functional | Stores user interface preferences including language, time zone, and dashboard layout | 12 months |
nd_hints |
Nossa Data | Functional | Records which onboarding hints and tooltips you have dismissed | 6 months |
_ga |
Google Analytics | Analytics | Registers a unique ID to generate statistical data on how you use the website | 2 years |
_ga_[ID] |
Google Analytics | Analytics | Used by Google Analytics 4 to persist session state between page requests | 2 years |
_gid |
Google Analytics | Analytics | Registers a unique ID for the current browsing session; used to distinguish users | 24 hours |
hubspotutk |
HubSpot | Analytics | Tracks visitors to the marketing website and associates web activity with HubSpot CRM contacts | 13 months |
__hstc |
HubSpot | Analytics | Main tracking cookie used by HubSpot to track visitor sessions on the marketing website | 13 months |
__hssc |
HubSpot | Analytics | Tracks session activity for HubSpot analytics, determines if HubSpot should increment session count | 30 minutes |
__stripe_sid |
Stripe | Essential | Fraud prevention and payment session identification during checkout flows | 30 minutes |
__stripe_mid |
Stripe | Essential | Fraud prevention cookie that persists the Stripe machine identifier across payment sessions | 1 year |
intercom-session-[id] |
Intercom | Functional | Maintains your Intercom chat session state within the authenticated platform | 7 days |
intercom-id-[id] |
Intercom | Functional | Identifies returning users to the Intercom chat widget so conversation history is preserved | 9 months |
This table reflects cookies in use as of the date stated at the top of this page. Cookie inventories are reviewed and updated when changes are made to our technology stack.
When you first visit nossadata.org, a cookie banner will appear allowing you to accept all cookies, accept essential cookies only, or manage your preferences by category. Your selection is stored in the nd_consent cookie for 12 months. You can change your preferences at any time by clicking the "Cookie Settings" link in the footer of any page.
All major browsers allow you to control cookies through the browser settings. Instructions for the most common browsers are provided below:
Note: Blocking essential cookies will prevent the platform from functioning correctly. If you block all cookies, you will not be able to log in to the Nossa Data platform.
Some browsers include a "Do Not Track" (DNT) signal feature that sends a request to websites asking them not to track your browsing activity. Currently, there is no uniform standard for how websites should respond to DNT signals, and our Service does not alter its behavior in response to DNT requests at this time.
For opt-out mechanisms specific to analytics providers we use, please refer to the links in Section 3 above (e.g., the Google Analytics Opt-out Browser Add-on).
We may update this Cookie Policy periodically to reflect changes in the cookies we use, new legal requirements, or changes in our technology. When we make material updates, we will post the revised policy on this page with an updated "Last updated" date. We encourage you to review this page periodically to stay informed about our cookie practices.
If you continue to use our website or Service after changes to this policy take effect, you acknowledge the updated policy.
If you have questions about our use of cookies or this Cookie Policy, please contact our Privacy Team:
Privacy Team