Cookie Policy

Effective 2026-05-19 · Version 1.0 · We are minimalists about cookies. The short version is below; the legal-precision version is the rest of the page.

Short version: Event Trekker uses two strictly-necessary cookies for sign-in security and remembering your theme/locale preferences. We do not use advertising cookies, tracking pixels, fingerprinting, or third-party analytics that set cookies. Our analytics (Plausible) is cookieless by design.

1. What cookies are

A "cookie" is a small text file that a website asks your browser to store. Cookies can be first-party (set by the site you are on) or third-party (set by a different domain that the page loaded a resource from, like an ad network). We use only a handful of first-party, strictly-necessary cookies and load no third-party cookie-setting scripts on the marketing site.

2. What Event Trekker uses

2.1 On the marketing site (et.nnssys.com)

Cookie Purpose Lifetime Category
none by default The marketing site sets no cookies of its own. — —

2.2 On the app (www.web.et.nnssys.com)

Cookie Purpose Lifetime Category
et_session Authentication session token (HTTPOnly, SameSite=Lax, Secure). Session (cleared when you sign out) Strictly necessary
et_csrf CSRF protection token (per OWASP ASVS L2 control 4.2.2). Session Strictly necessary
et_locale Remembers your language and time-zone preference between sessions. 1 year Functional
— No advertising, marketing, or third-party-analytics cookies. — —

3. Analytics — cookieless

We use Plausible Analytics on the marketing site and (post-MVP) on the web app. Plausible is GDPR-, PECR- and CCPA-compliant by design: no cookies, no cross-site tracking, no IP storage. It measures aggregated counts (page views, referrers, countries to the country level) and nothing else. You can read Plausible's own data policy at plausible.io/data-policy.

If we ever switch to a cookie-setting analytics provider (we have no plan to — but if we do), we will re-enable a cookie-consent banner that defaults to "decline" for non-essential categories, and we will update this page.

4. Third-party services that may set cookies on linked pages

When you follow an external link from this site — e.g., to the Apple App Store, Google Play Store, or to plausible.io — that destination's cookie policy applies. We do not load any third-party content (no embedded YouTube, no Facebook pixel, no Hotjar, no Intercom) on our marketing site, so simply visiting et.nnssys.com sets no third-party cookies.

5. How to control cookies

Because we set only strictly-necessary cookies on the app and none on the marketing site, a consent banner is not required under GDPR / ePrivacy. You can still control all cookies via your browser settings:

6. Do-Not-Track and Global Privacy Control

We honour the Global Privacy Control (GPC) signal: if your browser sends GPC, we will not enable any future cookie-based analytics or advertising on your visit. We also respect the legacy DNT header in the same way.

7. Changes to this policy

We will update this page if we change cookie behaviour. If we ever start setting non-essential cookies, we will publish a cookie-consent banner that defaults to "decline" for non-essential categories and we will email registered users 14 days before activation.

8. Contact

support@neuralnestsolutions.com

Changelog

← Back to Event Trekker