Cookie Transparency Policy
Every cookie and every piece of browser storage we use, explained in full — with complete control for you.
Last Updated: August 24, 2026
1. Introduction
This policy explains, completely and concretely, every cookie and every piece of browser storage nbow.io uses, what data each one involves, and how you control them. It complements our privacy policy and is written to meet the EU GDPR/ePrivacy rules and Chilean Law No. 21.719.
No cookies are set and nothing is sent to our server until you make a choice in the banner.
2. What are cookies and browser storage?
Cookies are small text files a website stores on your device; they can last for a browsing session or persist until deleted. Browsers also offer local storage (persists until deleted) and session storage (cleared when the tab closes). We use all three, sparingly — the complete inventory follows.
3. Complete inventory
| Name | Type | Purpose | Duration | When it is set |
|---|---|---|---|---|
| nbow_cookie_consent | Local storage | Remembers your accepted consent level and its timestamp | Until you delete it or reset your choice | When you accept cookies in the banner |
| nbow_cookie_rejection | Session cookie | Remembers that you rejected cookies so the banner does not reappear | Until you close your browser | When you click “Reject All” |
| nbow_banner_shown | Session storage | Technical flag that the banner was shown in this session | Until the tab/browser closes | When the banner is displayed |
| site.language | Local storage | Remembers the language you selected | Until you delete it | When you pick a language |
| site.theme | Local storage | Remembers your light/dark theme preference | Until you delete it | Only after you have accepted cookies |
| _ga, _ga_* | Cookies (Google) | Google Analytics 4: distinguishes visitors for usage statistics | Up to 2 years | Only on the production site, and only after you accept cookies |
| treatise-filter | Cookie (180 days), or local storage on the offline copy | Remembers the filter you chose in the Treatise of Physics, so it survives navigation between its tabs, a bookmark and a return visit | 180 days | Only after you have accepted cookies. Without consent the filter still works — it travels in the page address — but nothing is stored on your device |
| graph-animate, graph-side | Local storage | Remembers that you switched the graph animation off, or closed the side panel, in the Treatise graph explorer | Until you delete it | When you operate those two controls. They hold no identifier and are set without consent as interface state you asked for |
4. The three consent levels
None (Reject All — pre-selected)
No data is sent to our server and the banner writes nothing to local storage (your explicit language pick is still remembered — see the table above). The only thing set is the session cookie that remembers your rejection until you close the browser — without it, the banner would reappear on every page. Google Analytics is not loaded, and if you had accepted earlier it is switched off and its cookies are deleted. The Treatise filter is not stored either.
Statistics
We store a consent record on our server containing: consent level, timestamp, your country (derived from your IP via a geolocation service), browser version, browser identification, and your shortened IP (IPv4: last octet removed; IPv6: only the network prefix). Your consent choice is saved in local storage, your theme preference can be persisted, and Google Analytics is enabled on the production site.
Statistics + Experience
Everything in Statistics, plus the consent record additionally includes: the page you were on, the referring page (referrer), your browser window size, and your browser language — a one-time snapshot at the moment of consent, not continuous tracking by us.
5. Google Analytics 4
On the production site we use Google Analytics 4 (Google Ireland Ltd. / Google LLC, USA) to understand which pages are read. It loads only after you accept cookies — never before, and never if you choose “None”. Google sets the _ga cookies listed above and processes usage data on our behalf; data may be transferred to the USA under the EU-U.S. Data Privacy Framework. See Google's privacy policy for details on Google's processing.
6. Third-party requests
Independent of cookies, some requests reach third parties:
- • when you accept cookies, our server asks ipapi.co for the country belonging to your IP address; only the country code is kept;
- • the Google Analytics script, when enabled, is loaded from googletagmanager.com.
That is the complete list. Everything else this site needs — fonts, scripts, styles, the flags beside our phone numbers, and the whole Treatise of Physics with its mathematics rendering and its graph explorer — is served from nbow.io itself. Those parts of the site contact nobody but us, so no third party learns that you were here or which page you read.
7. Changing or withdrawing your choice
You can change or withdraw your consent at any time, free of charge, with effect for the future — as easily as it was given:
- • reopen the cookie banner via the settings menu (the sliders icon in the header) and choose again;
- • delete site data for nbow.io in your browser — this removes all entries listed above, including the _ga cookies;
- • after withdrawal, Google Analytics is no longer loaded and no further consent data is sent.
8. How we protect your data
- • IP shortening: the IP in consent records is truncated on receipt (IPv4: last octet removed, e.g. 203.0.113.0; IPv6: only the network prefix is kept), and the full IP used for the country lookup is not stored with the record.
- • HTTPS everywhere: all data in transit is encrypted.
- • No selling, no ad networks: we never sell your data and use no advertising cookies.
9. Legal framework and your rights
Consent under this banner meets the standards of Art. 6(1)(a) and 7 GDPR and of Chilean Law No. 21.719: it is prior, free, specific, informed, unambiguous — and revocable at any time. Your data-subject rights (access, rectification, erasure, objection, blocking, portability) and how to exercise them are described in the privacy policy.
10. Contact
Questions about cookies or this policy: contact@nbow.io.