Cookie Policy
Last updated: October 23, 2026
1. What cookies are
Cookies are small text files that websites save on your device to store information useful for the site to function. The same rules apply to similar technologies such as browser storage. This site uses two technical cookies (a third, only if you make an API key for our MCP server) and a few technical entries in your browser's storage, plus one statistical cookie and storage entry that we set only if you accept (point 3), all listed at point 6. We set no advertising or third party tracking cookies. The Chase chatbot, when you start it, uses three anonymous session cookies of its own service, listed at point 6.
2. Technical cookies (necessary)
These are essential for the site to work correctly and to store your preferences, including whether you accepted or rejected the statistics cookies (the nfw_cookie_consent cookie). They don't require consent and can't be disabled.
3. Statistical measurement (two modes)
For statistics we use exclusively PostHog, on servers located in the European Union, through our own address on this domain. It works in one of two modes, depending on the choice you make in the banner.
Cookieless mode is the default, and the one that applies if you click Reject or have not answered yet. Instead of a cookie, visits are counted from a hash computed on our servers from a salt that rotates daily and is deleted right after, with no persistent identifier and nothing stored on or read from your device. Because of that it doesn't require your prior consent under the ePrivacy rules that govern cookies, it is instead based on our legitimate interest in understanding how the site is used (GDPR Art. 6(1)(f), see the table of processing in our Privacy Policy).
Full mode applies only if you click Accept. PostHog then sets a first party cookie (ph_<project token>_posthog, 12 months) and a matching entry in your browser's local storage, so that returning visits and sessions are recognised, and it also records which elements are clicked and where on the page (heatmaps). This is based on your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time (point 5). We never attach a name or an email to this identifier.
In both modes data is aggregated, used only on this site and never shared for the provider's own purposes. Session recordings are switched off, and automatic capture never records what you type into fields. We don't use Google Analytics or any other advertising profiling tool.
4. What we DON'T do with your data
Statistical data is collected in aggregated form and used only to improve the site. We don't sell it or share it with third parties, and no AI system has access to it. What the Chase chatbot does with your messages is described in the Privacy Policy and in the notice shown before you start a chat.
5. Changing your choice
You can change your choice at any time from the Cookie preferences link in the footer of every page, no need to touch your browser settings. Choosing Reject deletes the PostHog cookie and its storage entry and brings you back to cookieless mode; choosing Accept turns full mode on. The site has no switch to turn measurement off completely: if you object to the cookieless counting (GDPR Art. 21), write to info@nfw.run and we will look at your request.
6. Cookies used
| Name | Type | Purpose | Duration |
|---|---|---|---|
| nfw_cookie_consent | Essential | Stores whether you accepted or rejected the statistics cookies | 12 months |
| ph_<project token>_posthog | Statistics, cookie and browser storage, only if you accept | PostHog cookie (servers in the European Union) and its matching local storage entry: they recognise later visits and sessions from the same browser. They hold no name or email. If you choose Reject they are deleted | 12 months |
| NEXT_LOCALE | Essential | Remembers the language you picked, so the site stops offering you the other one | 12 months |
| nfw_theme | Essential, browser storage | Remembers whether you prefer the light or the dark theme | Until you clear it |
| nfw_audit_ids, nfw_audit_pending, nfw_audit_compare | Essential, browser storage | Remember the SEO audits you started, so you can reopen and compare them on the same device | Until you clear them |
| nfw_mcp_owner | Essential, only if you make an API key | Random and anonymous: recognises you on the page of the MCP server's API keys, to show you your key. It holds no personal data | 12 months |
| nfw-engagement-prompt-seen | Essential, session storage | Avoids showing you the same invitation twice during a visit | Until you close the tab |
| nfw_chase_terms_v1 | Essential, browser storage | Remembers that you read the Chase notice, so it is not shown again | Until you clear it |
| client_id, session_id, user_id (Chase service) | Essential, only after you start Chase | Anonymous and random: tell which business Chase belongs to, which conversation this is (it changes with every new chat) and which anonymous user you are | Until you close the page |
7. Disabling cookies in your browser
You can manage or delete cookies directly from your browser settings (Chrome, Safari, Firefox, Edge). Disabling technical cookies may affect some of the site's functionality.
8. Contact
For questions about this Cookie Policy write to info@nfw.run. See also our Privacy Policy.