Cookie Policy

Last updated: March 17, 2026

1. What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the site to remember your actions and preferences over a period of time, so you don't have to re-enter them each time you visit or navigate between pages.

2. How We Use Cookies

NanoMani uses cookies solely to operate the platform and improve your experience. We do not use advertising cookies, tracking pixels, or sell your browsing data to any third party.

3. Categories of Cookies We Use

3.1 Strictly Necessary Cookies

These cookies are essential for the website to function. They cannot be disabled. Without them, services you have asked for (such as logging in or adding items to your cart) cannot be provided.

Cookie name	Purpose	Duration	Provider
`authjs.session-token`	Keeps you authenticated between page loads (JWT, HTTP-only, encrypted)	30 days (rolling)	NanoMani (Auth.js)
`authjs.csrf-token`	Protects sign-in and sign-out forms against cross-site request forgery	Session	NanoMani (Auth.js)
`authjs.callback-url`	Remembers where to redirect you after completing OAuth sign-in	Session	NanoMani (Auth.js)
`nm-cookie-consent`	Stores your cookie preferences so we don't ask again (stored in localStorage, not a cookie)	1 year	NanoMani

3.2 Functional Cookies

These cookies remember choices you make to improve your experience. If you decline these, some features may behave differently.

Cookie name	Purpose	Duration	Provider
None currently set	—	—	—

3.3 Analytics Cookies

These cookies help us understand how visitors interact with the platform so we can improve it. All data is aggregated and anonymous.

Cookie name	Purpose	Duration	Provider
None currently set	—	—	—

3.4 Advertising & Targeting Cookies

We do not use advertising or targeting cookies. We do not partner with ad networks or allow third-party advertising on NanoMani.

4. Third-Party Cookies

When you sign in via Google OAuth, Google may set its own cookies on your device, governed by Google's Privacy Policy. When you complete a payment, Stripe may set cookies required for secure payment processing, governed by Stripe's Privacy Policy.

5. Your GDPR Rights

If you are located in the European Economic Area (EEA), United Kingdom, or another jurisdiction with data protection laws, you have the following rights regarding cookies and the personal data they may process:

Right to be informed — this Cookie Policy fulfils that obligation.
Right to consent & withdraw consent — you can manage or withdraw your cookie preferences at any time (see Section 6 below).
Right of access — request a copy of the personal data we hold about you.
Right to erasure — request deletion of your account and associated data.
Right to data portability — request your data in a machine-readable format.
Right to object — object to processing based on legitimate interests.

To exercise any of these rights, contact us at privacy@nanomani.com. We will respond within 30 days.

6. Managing Your Cookie Preferences

You can control cookies in the following ways:

Cookie banner — when you first visit NanoMani, a banner appears. Use the Manage button to set granular preferences, or Reject non-essential to allow only strictly necessary cookies.
Reset your preferences — clear your browser's localStorage (key: nm-cookie-consent) to reset your choices and see the banner again.
Browser settings — most browsers let you view, delete, and block cookies. Blocking strictly necessary cookies will prevent you from logging in. See your browser's help documentation:

7. Legal Basis for Processing

Strictly necessary cookies are processed on the basis of legitimate interests and contractual necessity — they are required for you to use the services you have requested. For all other cookie categories, we process data only on the basis of your explicit consent, which you can withdraw at any time.

8. Data Controller

The data controller responsible for cookies set by NanoMani is:

NanoMani
Email: privacy@nanomani.com

9. Changes to This Policy

We may update this Cookie Policy as we add new features or as regulatory requirements change. The "Last updated" date at the top of this page indicates when it was last revised. We will notify you of material changes via email or a notice on the platform.