Cookie Policy

Norviq does not set any cookies of its own. The things we store on your device — your sign-in session and your interface preferences — use your browser's local storage, which is a different mechanism from cookies even though EU rules on storing information on a device can cover both.

We do not use third-party analytics products or analytics cookies. There is no Google Analytics, PostHog, Plausible, Hotjar or similar product in the application. We do use one marketing technology: the Meta Pixel, which measures how our adverts on Facebook and Instagram perform. In the EU/EEA, the UK and Switzerland it only runs if you accept it in our cookie banner, and you can change your choice at any time via “Cookie settings” in the footer.

"Cookies" are small files a site stores on your device. Similar technologies include local storage and session storage, which work in the same way for the purposes of EU cookie rules. This policy covers all of them, and it distinguishes them: where we write "local storage" we mean exactly that, not a cookie.

These are required for the Service to work and cannot be switched off within the app. They are set by us or by our authentication provider.

• Authentication session — a local storage entry (sb-…-auth-token) holding your session and refresh token so you stay signed in. Set by Supabase Auth. Persists until you sign out or it expires.
• Security and infrastructure — our hosting and database providers may set technical cookies needed to route and secure requests.

These remember choices you make so the interface behaves consistently. They are stored in your browser's local storage and are never sent to us as identifiers.

• Dashboard layout and which KPI tiles you have chosen to display.
• Performance scope selection (entire account vs. since Norviq verification).
• Leaderboard filters and selected metric.
• Saved inputs in the position size calculator.
• Internal owner/staff tooling state, where applicable to your account.

None. Norviq does not run a third-party web analytics product and sets no analytics cookies. Aggregate platform figures shown on our homepage are calculated from data already in our database, not from tracking your browsing. Our hosting and database providers keep standard server logs, and the application sends technical error reports to our development platform when something breaks — neither of these places a tracking cookie on your device.

We do keep a simple, cookieless visitor count so we know how many people use the site. When a page loads, our own server combines your IP address, your browser's user-agent string and a secret key we never publish, and stores only the resulting one-way, pseudonymous identifier together with the date. It is designed not to identify visitors, is not linked to your account and is not used by Norviq to identify you. In this visitor-count system, we do not store your IP address, user-agent string, the pages you viewed, a referrer or any persistent device or browser identifier, and nothing is written to cookies or local storage. Standard infrastructure and server logs may separately contain technical information such as IP addresses and user-agent strings. This counting applies to all visitors, including those who are not signed in. Pseudonymous daily records are deleted when their date is more than 400 days old, and a pseudonymous visitor record is deleted after more than 400 days without a further visit. Only anonymous aggregate numbers (an all-time count of unique visitors and a count per calendar day) are kept indefinitely.

We use one marketing technology: the Meta Pixel (pixel ID 999740766412260), provided by Meta Platforms Ireland Limited. It lets us see how many people who saw or clicked one of our adverts on Facebook or Instagram went on to visit Norviq, create an account or start a paid subscription.

When the pixel is active it loads a script from Meta and may set or read Meta cookies in your browser (for example _fbp). It reports page views, successful account creation and successful paid subscriptions — including the amount charged and its currency — along with the technical information Meta receives with any request to it, such as your IP address and browser information. We do not send Meta your name, email address or telephone number, and we do not upload customer lists to Meta.

We do not run retargeting audiences or any other advertising or tracking technology, and the pixel is never loaded until it is permitted under the Consent section below.

• Google Sign-In — only if you choose to sign in with Google. Google sets cookies on its own domains during that flow, on Google's pages, at your initiative.
• Stripe — when you open checkout or the billing portal, Stripe sets cookies for payment processing and fraud prevention. These are necessary to take a payment and are only involved once you choose to start a purchase.
• Discord — only if you follow our community link and visit Discord.

These are governed by each provider's own cookie and privacy policies. None of the three above are advertising or analytics services and none of them are loaded on ordinary page views; the only service loaded on ordinary page views is the Meta Pixel, and only where it is permitted as described above. Fonts are self-hosted on norviqtrade.com, so no font CDN is contacted.

Strictly necessary and preference technologies are used because you trigger them by using the Service, and they do not require consent. The Meta Pixel does.

If you are in the EU/EEA, the UK or Switzerland — or if we cannot determine where you are — the Meta Pixel is not loaded until you accept it in the banner shown on your first visit. Rejecting is as easy as accepting, and rejecting means the pixel is never loaded and no data is sent to Meta. Outside those regions the pixel runs without a banner, subject to any opt-out rights that apply where you live. Your choice is remembered in your browser's local storage and you can change it at any time via “Cookie settings” in the footer. Withdrawing consent stops further reporting to Meta immediately; it cannot undo reporting that already happened.

Web fonts are self-hosted, so no data is sent to a third-party font provider when you load a page and no consent question arises from fonts.

You can clear cookies and local storage for norviqtrade.com in your browser settings, or block them entirely. Doing so will sign you out and reset your interface preferences, and blocking storage completely will prevent the Service from working.

Questions about this policy: support@norviqtrade.com. See also our Privacy Policy and the Contact page.