Cookies & browser storage
Last updated October 14, 2026
NuvoMail uses cookies and browser storage for sign-in, security and preferences. Optional tracking stays off until you choose it. Closing the privacy panel does not enable tracking.
Necessary storage
Supabase authentication cookies maintain your signed-in session. The nuvo_last_org cookie remembers your workspace for up to one year. Local browser storage remembers your theme, sidebar layout, reader font size and setup-guide choice. These support the service and are separate from analytics.
Google Analytics — optional
When enabled, Google Analytics measures visits to the public NuvoMail website. It can use _ga and _ga_* cookies and process browser, device, interaction and approximate location information. NuvoMail does not load this tag before permission or track signed-in workspace routes. Page URLs sent by NuvoMail omit query strings and fragments. Google Analytics is disabled on staging and local development.
Article usage — optional
Article usage is a separate choice from Google Analytics. The current Blog and Help guides do not use this separate article-view tracker. Google Analytics can still measure public page visits if you enable it. Earlier database-backed article pages could record an article ID, browser user agent, and temporary session ID when this choice was enabled. Turning it off removes the older _blog_sid and _help_sid browser identifiers; previously recorded views follow the retention practices in the Privacy Policy.
Ad measurement — optional
With your separate permission, NuvoMail remembers a ChatGPT ad-click reference in nuvomail:ad-reference:v1 browser storage for up to 30 days. A nuvomail_ad_measurement cookie records this permission for up to 180 days so the server can check it. When you create a workspace after an ad click, NuvoMail sends OpenAI that reference, the creation time, a unique event identifier, and a fixed public registration URL. It does not send your name, email address, workspace name, email content, or files. We use a server integration instead of a browser pixel that scans forms. Measurement is disabled on staging and local development. Withdrawing permission removes the reference and consent cookie and stops future events.
Your choices
Your choices are saved in nuvomail:privacy:v1 local storage for 180 days. You can reject optional categories, accept all, or choose each separately. Earlier choices do not enable ad measurement. If saving fails, optional tracking stays off. Withdrawing permission stops future tracking and removes accessible optional identifiers without signing you out. Necessary hosting, security and operational logs are not controlled by these optional switches.