Cookie policy

Cookies are small files a website stores in the browser. We may also use local storage, pixels, tags, session identifiers, and device technologies with similar functions. Some last only for a session, while others remain until expiration or deletion.

First-party cookies belong to the Nurtumi domain. Third-party cookies may be set or read by an authorized provider under its own policies.

These technologies authenticate accounts, maintain sessions, prevent fraud and abuse, remember language and consent, balance requests, and provide requested features. They are not used for advertising and cannot be disabled through the notice without affecting essential functions.

• Better Auth session and security cookies: identify a valid session and apply authentication protections. Names may vary by environment and they generally expire with the session or within its configured period.
• mom_cookie_consent_v1: retains for up to 12 months whether you accepted, rejected, or configured optional categories.
• mom_locale and equivalent preferences: remember language and presentation for the configured period.
• Cloudflare Turnstile: processes technical signals needed to distinguish legitimate activity from abuse during registration, sign-in, and recovery.
• Functional storage and service worker: support web installation, continuity of some preferences, playback, and notifications you request.

With your consent, Google Tag Manager may load measurement tags to understand in aggregate which pages and features are useful, identify problems, and improve the experience. Nurtumi restricts product events and must not send names, notes, questions, health signals, or child identifiers.

Configured tags may use identifiers such as _ga or _gid and retain them for provider-defined periods, commonly from one session up to two years. The live container configuration and Google's policies determine the specific cookies.

With your consent, we may measure campaign source and results with Google or Meta. These technologies may use UTM parameters, local storage, and identifiers such as _gcl_au, _fbp, or _fbc, commonly for periods up to 90 days, although providers may change names and durations.

To measure registrations and purchases, Nurtumi may send events directly from the server to Meta. Email and account ID are transformed with SHA-256 before transmission; IP address, user agent, measurement identifiers, conversion type, currency, amount, and technical purchase ID may also be included.

This category may help measure campaigns or show relevant communications outside Nurtumi. It does not authorize sending family records, notes, questions, health signals, or children's names to those providers.

On the first visit, you can accept all, reject optional categories, or configure them separately. Rejecting is as direct as accepting and does not restrict essential features.

You can change your choice by clearing the consent cookie or site data in browser settings and reopening Nurtumi. Withdrawal applies going forward; to remove identifiers already stored, also clear the site's cookies and storage. Browsers can block cookies, although blocking necessary ones may prevent sign-in or session continuity.

Notification permissions are also managed within Nurtumi and through browser or operating-system settings.

Google, Meta, Cloudflare, and other authorized providers may receive an IP address, browser details, identifiers, and limited activity when their technology is enabled. They may process information in the United States or other countries under their own policies and applicable legal mechanisms.

Google Tag Manager is a tag manager: cookies depend on the tags actually configured. We review the configuration to keep it aligned with the categories and consent described here.

Some browsers offer “Do Not Track” or other global signals. Because there is no uniform technical standard for all of them, Nurtumi does not automatically respond to every such signal. You can use the controls described in this policy; where law requires a specific opt-out signal to be recognized, we will treat it as the corresponding legal request.

We will update this policy when categories, providers, or purposes materially change. Where needed, we will request consent again.

For cookie or privacy questions, email [email protected]. The Privacy Policy provides more information about controllers, rights, transfers, and retention.