Cookie
本文件的正式、具有法律约束力的版本为英文版。中文翻译将另行发布。
3.1 General
FindMePlace does not currently intentionally use Google Analytics, Meta Pixel, Hotjar or comparable advertising/behavioural tracking tools.
The current Portal uses first-party cookies and short-lived browser storage primarily for:
- login/session operation;
- language selection;
- Google/Facebook OAuth security and registration completion.
3.2 Cookies used by FindMePlace
| Cookie | Purpose | Typical lifetime | HttpOnly |
|---|---|---|---|
nwn_session | Authenticated session token | 30 days | Yes |
nwn_locale | Remembers the interface language selected by the user | 365 days | No |
nwn_google_state | Short-lived CSRF protection during Google OAuth login; deleted after the OAuth return | 10 minutes | Yes |
nwn_facebook_state | Short-lived CSRF protection during Facebook OAuth login | 10 minutes | Yes |
nwn_oauth_pending | Links the browser to a temporary registration record while Google/Facebook OAuth registration is being completed | 15 minutes | Yes |
3.3 Disabled geolocation cookie/function
The code contains functionality for a cookie named nwn_geo_hint. Its purpose would be to remember a language hint based on approximate IP geolocation for approximately 24 hours.
This function is currently disabled in production.
The external IP lookup does not run unless both the technical feature switch and the separate legal-review switch are enabled.
If this feature is activated in the future, FindMePlace will first update the applicable privacy/cookie information and complete the required legal review.
3.4 Removed cookie
The former nwn_known_visitor cookie has been removed and is no longer part of the current production cookie inventory.
3.5 localStorage
FindMePlace does not currently use localStorage.
3.6 sessionStorage
The Portal uses two temporary interface markers in sessionStorage to remember that the user dismissed:
- a registration hint;
- a language-change hint.
These markers are removed when the browser tab/session ends and are not intended to contain account identity data.
3.7 Cloudflare
FindMePlace uses Cloudflare services including DNS, Tunnel/Zero Trust, R2 and Turnstile.
Cloudflare may process technical information necessary to provide those services in accordance with its own contractual and privacy documentation.
3.8 Changes
If FindMePlace later introduces analytics, advertising, non-essential tracking or other storage requiring a consent mechanism, the necessary consent controls and this Policy will be updated before that processing is activated.