Cookie Policy
Last updated: April 8, 2026
Nombrio uses cookies and similar technologies to run the service, keep you signed in, and understand aggregate usage. This page lists every cookie we set, why we set it, and how long it lasts. We do not use advertising or cross-site tracking cookies.
1. What is a cookie?
A cookie is a small piece of data that a website stores in your browser. Some cookies are strictly necessary (the site can't function without them), some support security or preferences, and some collect aggregate analytics. Local storage and session storage work similarly and are covered by the same disclosures below.
2. Cookies we set directly (first-party)
| Name | Purpose | Duration | Category |
|---|---|---|---|
| nombrio_utm | Attribution — remembers where you came from (e.g. ?utm_source=newsletter) so we can credit the source of signups and paid conversions. Only stores the UTM parameter values you arrived with, nothing else. | 90 days | Analytics |
| theme | Remembers your light/dark mode preference (stored in localStorage, not a traditional cookie). | Until cleared | Preference |
3. Cookies set by our service providers (third-party)
We rely on a small set of trusted providers to run the service. Each one sets its own cookies when you use the relevant feature. We do not control these cookies directly — refer to each provider's policy for full details.
| Provider | Purpose | Category | Policy |
|---|---|---|---|
| Clerk | Authentication — session cookies that keep you signed in, plus bot/abuse protection via a Cloudflare Turnstile challenge on sign-up. Cookies: __session, __client_uat, __clerk_*. | Strictly necessary | clerk.com/legal/privacy |
| Stripe | Payment processing and fraud detection during checkout. Cookies are set on the Stripe-hosted checkout page, not on nombrio.com. Only applied if you start a checkout flow. | Strictly necessary | stripe.com/privacy |
| Vercel Analytics | Privacy-friendly, aggregate page-view and event analytics. Does not use tracking cookies or collect personally identifiable information; uses a short-lived, hashed visitor identifier that rotates daily. | Analytics | vercel.com/docs/analytics/privacy-policy |
4. What we don't do
- No advertising cookies
- No cross-site tracking pixels
- No sale of data to third parties
- No fingerprinting beyond the minimum needed for authentication and abuse prevention
5. How to manage cookies
You can clear or block cookies at any time via your browser settings. Blocking Clerk's session cookies will sign you out and prevent sign-in. Blocking Stripe's cookies will prevent checkout. Blocking Vercel Analytics has no impact on the functionality of the service.
Your browser's “Do Not Track” signal is honored: we don't load analytics when it is set.
6. Changes to this policy
If we add or remove a cookie, we'll update this page and the “Last updated” date above. For material changes, we'll also notify signed-in users by email.
7. Contact
Questions about this policy? Email privacy@nombrio.com.