Cookie Policy

The one cookie and the browser storage Node Lodge uses on its website and console, what each does, how long it lasts, and why there is no consent banner.

1. Summary

1.1. The Node Lodge website sets no cookie. It keeps one item in your browser: the language you chose.

1.2. The console uses one strictly necessary cookie to keep you signed in, and browser storage for interface preferences. Neither is used for advertising, analytics or tracking, and nothing is shared with third parties.

1.3. Because everything listed here is strictly necessary for a service you request, or keeps a choice you made, the law does not require your consent and we show no consent banner.

Name	Purpose	Duration	Set by
`__Host-cm_session`	Keeps you signed in to the console. Holds a random token; the server stores only its hash. Sent only to nodelodge.com over HTTPS, unreadable by scripts, never sent with requests from other sites	Until you sign out, at most 7 days (12 hours for administrators)	Node Lodge

3. Browser storage

The website and the console keep these items in your browser. They never leave your device.

Key	Kind	Purpose	Duration
`nl.lang`	Local storage	The website language you chose, or that you declined the suggested language	Until you clear it
`nl.theme`	Local storage	Your light or dark theme	Until you clear it
`nl.sidebar`	Local storage	Whether the sidebar is expanded or collapsed	Until you clear it
`nl.onboarding.<account>`	Local storage	Hides the getting-started checklist after you dismiss it	Until you clear it
`nl.steps.<guide>`	Local storage	The step you reached in a step-by-step guide	Until you finish the guide or clear it
`nl.billing.card-before`	Session storage	Recognizes the card you just saved when you come back from the payment page	Until you close the tab
`nl:stale-build-reload`	Session storage	Prevents a reload loop after we publish a new version of the console	Until you close the tab

4. Third parties

4.1. Payment pages. When you buy Credit or save a card, you are sent to pages hosted by our payment processor on its own domain. It sets the cookies it needs for security and fraud prevention under its own policy.

4.2. Error reports. When an error occurs, the console and the access request form send an error report to our own error monitoring server. It sets no cookie, and cookies are removed from the report.

4.3. Images and video. Website images and video come from our media domain, which sets no cookie.

5. Your choices

5.1. You can delete cookies and browser storage in your browser settings. Deleting the session cookie signs you out; deleting storage resets your preferences.

5.2. We honor Global Privacy Control signals. Since we do not sell or share personal information, the signal changes nothing on our Service.

6. Changes

We update this policy when we add or remove a cookie or a storage item. Each version has a number and dates, and previous versions remain available on our legal page.

Questions: privacy@nodelodge.com.