Cookies & similar technologies

1. What we use

Essential (always on): Our site needs basic functionality to work (for example, navigation and security). These are not optional and are not covered by any consent choice.

Optional analytics: We install Google Analytics 4 (measurement IDs G-EDNLWC2NKK for this hub and G-SFESMZCD3G for the shared Novus network roll-up) via the googletagmanager.com tag script with Consent Mode defaults denied. Both destinations are configured from one gtag.js loader in delivered HTML (not as separate script tags). In the EU, EEA, UK and Switzerland, storage and consented measurement stay off until you allow them; everywhere else analytics runs by default and you can turn it off at any time using the control further down this page. We configure IP anonymization either way. Google Analytics is the only analytics product on this site, we run no other measurement, performance, or session-recording service. If you turn analytics off, or enable Global Privacy Control, analytics storage is denied and no consented page view is recorded.

Local storage: We store your choice under the key novus-stream-cookie-consent in your browser so we do not ask on every visit. This value is not used to identify you personally.

Region cookie (strictly necessary): We set a first-party cookie named nss-ad-region holding a single value, strict or open, derived from the country your request comes from. It exists only so we know which consent rules to apply to you. It stores no identifier, no precise location, and nothing about your browsing.

Advertising opt-out cookie (strictly necessary): A first-party cookie named nss_ads_optout with the value 1 records a decision not to request advertising. The advertising control on this page sets it, and other Novus sites set it at the novusstreamsolutions.comscope so one choice covers the ecosystem. While it is set, this site's server leaves the Mediavine script described below out of every page it sends you. It only ever reduces processing and never enables anything, and it stores no identifier and nothing about your browsing.

Sign-in cookies (strictly necessary, only if you have an account): None of these exist until you sign in, and every page on this site works without them. better-auth.session_token is the cookie that keeps you signed in; it holds a random session identifier, never your email or password. On the live site it carries a __Secure- prefix, which is a browser instruction never to send it over plain HTTP. better-auth.session_data is a cache of your own session, kept for one minute, so most page views do not need a database read. If you sign in with Google, short-lived better-auth.state and better-auth.pkce_code_verifier cookies exist only for the seconds between leaving for Google and coming back, and protect that round trip from being forged. A password-reset link, when one is sent, is exchanged for an nss_reset_token cookie that lasts at most an hour and is sent only to the reset page, so the token never appears in a page address; setting the new password deletes it. All are first-party, HttpOnly so page scripts cannot read them, SameSite=Lax, and Secure in production. Signing out deletes them; deleting your account deletes them and the session records behind them.

Sign-in indicator (strictly necessary): Alongside those, we set a first-party cookie named nss-signed-in whose only value is 1. It exists so the header can say "Account" rather than "Sign in" without this site having to ask the server who you are on every page you open. It holds no identifier, no name, no address and no token, it is not used to identify you, and nothing on the server trusts it — editing it in your browser changes one word in the menu and grants no access to anything. It is removed on the first page you load after signing out.

Advertising (third parties): The site is ad-supported. Programmatic advertising is managed through Mediavine. Mediavine and its demand partners may set cookies or use device storage to show and measure ads. Mediavine's script is part of every page on this site except the sign-in, sign-up, password and admin screens, which carry no advertising at all, and Mediavine's own consent tool, not any control on this site, is what asks for and records your advertising consent. It appears for visitors in regions where advertising consent is required, and the choices you make in it are passed to Mediavine and its partners. The preferences on this page govern analytics.

2. Two consent tools, and which one does what

The preferences on this page govern analytics. This site shows no cookie banner or pop-up of its own: this page is where you make and change that choice, and you can reach it from the footer of every page. Google Analytics is denied by default in the EU, EEA, United Kingdom, and Switzerland until you choose Allow analytics cookies below (or Journey’s consent tool grants the matching purposes). Everywhere else it runs by default. Choosing Turn analytics off, or enabling Global Privacy Control, leaves analytics storage denied in every country.

Mediavine's own consent tool governs advertising. The Mediavine script loads as part of every page here except the sign-in, sign-up, password and admin screens; that is what keeps the site free. Where advertising consent is required, including the EU, EEA, United Kingdom, and Switzerland, Mediavine shows its own prompt and records your answer; what advertising cookies are set, and whether ads are personalised, follows that answer rather than the controls on this site. This is a change from earlier versions of this page, which said that declining on our banner stopped advertising from loading.

3. Third parties

Google Analytics is provided by Google LLC. Advertising is managed through Mediavine. How those services use data depends on their own policies. Linked ecosystem apps (for example Sonic Weaver and Novus Examples) have their own notices when you leave this domain.

4. Your controls

You can change your mind at any time using the controls below, or use your browser settings to block or delete cookies and site data. Withdrawing analytics consent sets Consent Mode to denied, expires applicable Google Analytics cookies, and reloads once so the gate stays closed. Blocking all cookies may affect how some features work.

There are two controls below because there are two separate choices. The analytics control turns Google Analytics on or off for this browser, in every region. The advertisingcontrol reopens Mediavine's own consent tool, and withdrawing there is as easy as granting. That second control appears only when Mediavine is actually asking you for advertising consent on the page: outside the regions where that consent is required it does not ask, so there is nothing for you to withdraw and we do not show you a button that would do nothing. In that case, and at any other time, you can limit advertising through your browser settings and industry opt-outs such as YourAdChoices or Your Online Choices.

5. Related policies

For how we handle personal information more broadly, see our Privacy Policy. For rules of use of this site, see the Terms of Service.