Cookie Policy

Last updated: September 12, 2026

1. What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the site to remember your actions and preferences over a period of time, so you don't have to re-enter them each time you visit or navigate between pages.

2. How We Use Cookies

nanoMani uses cookies solely to operate the platform and improve your experience. We do not use advertising cookies, tracking pixels, or sell your browsing data to any third party.

3. Categories of Cookies We Use

3.1 Strictly Necessary Cookies

These cookies are essential for the website to function. They cannot be disabled. Without them, services you have asked for (such as logging in or adding items to your cart) cannot be provided.

Cookie name	Purpose	Duration	Provider
`authjs.session-token`	Keeps you authenticated between page loads (JWT, HTTP-only, encrypted)	30 days (rolling)	nanoMani (Auth.js)
`authjs.csrf-token`	Protects sign-in and sign-out forms against cross-site request forgery	Session	nanoMani (Auth.js)
`authjs.callback-url`	Remembers where to redirect you after completing OAuth sign-in	Session	nanoMani (Auth.js)
`nm-cart`	Holds an anonymous identifier so your basket survives page loads before you sign in. It contains no personal data and is merged into your account, then deleted, when you sign in.	30 days	nanoMani
`nm-cookie-consent`	Stores your cookie preferences so we don't ask again (stored in localStorage, not a cookie)	1 year	nanoMani

3.2 Functional Cookies

These cookies remember choices you make to improve your experience. If you decline these, some features may behave differently. On nanoMani this category governs one thing: the Translate button in the header, which is powered by Google Translate. Nothing is requested from Google until you both grant this permission and press the button — if you have not granted it, pressing Translate reopens this banner and asks, rather than loading anything.

Cookie name	Purpose	Duration	Provider
googtrans	Remembers the language you chose so the page stays translated as you move around the site. Set by Google Translate, only after you use the Translate button.	Session	Google

3.3 Analytics Cookies

These cookies help us understand how visitors interact with the platform so we can improve it. All data is aggregated and anonymous.

Nothing is loaded unless you allow it. We use Cloudflare Web Analytics, and it is not requested at all until you grant analytics consent in the banner. Withdraw consent from Cookie settings in the footer and collection stops immediately.

Cloudflare Web Analytics is cookieless: it writes nothing to your device, uses no fingerprinting, and cannot follow you to other websites. Strictly speaking it therefore needs no consent at all — we ask anyway, because we said we would and because a toggle that governs nothing is worse than no toggle.

Cookie name	Purpose	Duration	Provider
None currently set	—	—	—

3.4 Advertising & Targeting Cookies

We do not use advertising or targeting cookies. We do not partner with ad networks or allow third-party advertising on nanoMani.

4. Third-Party Cookies

When you sign in with Google, Facebook or LinkedIn, that provider may set its own cookies on your device, governed by its own privacy policy — Google, Meta, LinkedIn. When you complete a payment, our payment providers may set cookies required for secure payment processing: nanoMani uses Cashfree, PayU, and PayPal, each governed by its own privacy policy. Their scripts or hosted checkout pages are used only when that payment method is offered and you choose it.

If you use the Translate button, Google Translate loads a script from translate.google.com and may set its own cookies, governed by Google's Privacy Policy. This happens only with your Functional consent and only after you press the button — see section 3.2.

5. Your GDPR Rights

If you are located in the European Economic Area (EEA), United Kingdom, or another jurisdiction with data protection laws, you have the following rights regarding cookies and the personal data they may process:

Right to be informed — this Cookie Policy fulfils that obligation.
Right to consent & withdraw consent — you can manage or withdraw your cookie preferences at any time (see Section 6 below).
Right of access — request a copy of the personal data we hold about you.
Right to erasure — request deletion of your account and associated data.
Right to data portability — request your data in a machine-readable format.
Right to object — object to processing based on legitimate interests.

To exercise any of these rights, contact us at admin@nanomani.com. We will respond within 30 days.

6. Managing Your Cookie Preferences

You can control cookies in the following ways:

Cookie banner — when you first visit nanoMani, a banner appears. Use the Manage button to set granular preferences, or Reject non-essential to allow only strictly necessary cookies.
Change or withdraw your choice at any time — select Cookie settings in the footer of any page to reopen the banner. Your previous answers are shown and can be changed or withdrawn.
Browser settings — most browsers let you view, delete, and block cookies. Blocking strictly necessary cookies will prevent you from logging in. See your browser's help documentation:

7. Legal Basis for Processing

Strictly necessary cookies are processed on the basis of legitimate interests and contractual necessity — they are required for you to use the services you have requested. For all other cookie categories, we process data only on the basis of your explicit consent, which you can withdraw at any time.

8. Data Controller

The data controller responsible for cookies set by nanoMani is:

nanoMani
Email: admin@nanomani.com

9. Changes to This Policy

We may update this Cookie Policy as we add new features or as regulatory requirements change. The "Last updated" date at the top of this page indicates when it was last revised. We will notify you of material changes via email or a notice on the platform.