Cookie policy

We use a necessary session cookie called nucms_session to protect forms, prevent forged submissions, remember temporary form feedback and keep staff signed in. The cookie contains a session identifier; session data is stored on the server.

This is a first-party session cookie without a persistent expiry. Browsers normally remove it when the browsing session ends, although session restoration may retain it. The application expires sessions after 24 minutes of inactivity. It is HttpOnly, SameSite=Lax and Secure in production.

The built-in CMS does not set analytics or advertising cookies. Acknowledging this notice stores only a version marker in localStorage to remember your choice across tabs and visits until browser storage is cleared. If persistent storage is blocked, sessionStorage is used for the current tab where available. This is not tracking consent. You can block cookies in your browser, but forms and staff sign-in may stop working.

Configured external fonts and links may contact other providers. Cookies introduced by hosting services or additional integrations must be disclosed separately.