//cookiesCookie Policy
Every cookie and storage key on this site
Last updated 19 August 2026. The list below is complete, not a sample. If you find something in your browser storage from checkpointnomad.com that is not on this page, tell us — it is a bug and we want to know.
1. What this site sets today
One key, and it exists only because you made a choice. There is no analytics cookie, no advertising pixel and no third-party script on this site as it stands. Cookies are not the whole story, though — section 2 sets out what the server records without any cookie being involved.
| Key | Type | Purpose | Lifetime | Category |
|---|---|---|---|---|
| cn-consent | localStorage (first party) | Stores the choice you made in the cookie banner, with a version number and the time you made it, so we do not ask again and can show that a choice was recorded. | Until you clear it or your browser storage is cleared | Strictly necessary — exempt from consent under ePrivacy Art. 5(3) |
2. Not a cookie, but you should know about it anyway
A cookie policy that lists only cookies can leave the impression that nothing else is recorded. It is, and not by a tag — by the web server itself, for every request any browser makes to any site. The description below is rendered from the same source as the notice on our forms and §2.3 of the Privacy Policy, so all three always say the same thing.
- A truncated one-way hash (SHA-256) of your IP address, with the time of each submission. To count submissions per sender so the forms cannot be flooded. The hash cannot be turned back into your IP address, and the raw address is never written to the database. Legal basis: Art. 6(1)(f) — our legitimate interest in keeping the forms usable. Kept: The counter file is deleted 24 hours after your last submission. Linked to a form submission: Yes — the same hash is stored in the row with your submission, so an abusive sender can be identified and removed. It is deleted with the row.
- Standard web-server log lines: IP address, date and time, the URL requested, the HTTP status, and the browser user-agent string. Security, abuse investigation and diagnosing errors. This is recorded for every request to any page of this site, not only when you send a form. Legal basis: Art. 6(1)(f) — our legitimate interest in operating the service securely. Kept: 30 days, then deleted. Linked to a form submission: No. Server logs are not joined to submissions and are not used to build a profile.
- An application event log recording that a submission was stored, with its reference — no names, addresses, message text or IP addresses. To detect failures, such as a submission that could not be saved. Legal basis: Art. 6(1)(f) — our legitimate interest in a working service. Kept: 30 days. Linked to a form submission: Only by the reference shown to you after sending, which is not personal data on its own.
Every asset on this site — fonts, styles, scripts, images — is served from checkpointnomad.com itself. There is no analytics provider, no advertising pixel, no chat widget, no content delivery network and no third-party font host. The only organisation other than us that can see the traffic is Hostinger International Limited, which operates the server in Düsseldorf, Germany as our processor under Article 28. If an analytics or advertising tag is ever added, it will load only after you allow it in the cookie banner, and it will be listed on the cookie page before it goes live.
3. What could be set later, and only with your consent
If we run advertising campaigns we may add Microsoft Advertising conversion tracking (the UET tag) and a privacy-respecting analytics tool. Both sit behind the categories below and neither loads unless you switch it on. The site already implements Microsoft Consent Mode: a “denied” signal is sent by default on every page load, and an update is sent the moment you change your choice. When a tag is added, this page is updated with its name, its cookies and their lifetimes before it goes live.
- Strictly necessary (always on). Keeps this site working: your cookie choice, form anti-abuse protection and the session that lets a form submission be matched to your browser. Exempt from consent under ePrivacy Article 5(3).
- Analytics. Aggregated measurement of which pages are read and which submissions complete. Off unless you switch it on. No analytics provider is loaded today.
- Advertising. Measurement of advertising campaigns, including Microsoft Advertising conversion tracking (UET). Off unless you switch it on. No advertising tag is loaded today.
4. Your current choice
You have not made a choice yet, so everything except strictly necessary storage is off. Nothing non-essential runs before you decide — there is no “by continuing to browse you agree” on this site, because that is not consent.
5. Controlling storage in your browser
You can clear or block cookies and site storage in your browser settings at any time. Removing the key above simply means the banner asks again. Blocking storage entirely does not break this site — nothing here depends on it except remembering your answer.
6. Questions
Write to info@checkpointnomad.com. See also the Privacy Policy, which covers everything that is not a cookie, and the Terms of Service.