Last updated: 2026-10-24
NIS2YOU uses cookies that are strictly necessary to operate the Service, which do not require prior consent (ePrivacy Directive). No advertising cookies.
In the EEA, the UK and Switzerland, only with your consent (cookie banner), we use Google Analytics 4 to measure audience. Visitors outside the EEA, the UK and Switzerland have Google Analytics enabled by default and can refuse it through the cookie banner.
| Cookie | Purpose | Duration |
|---|---|---|
| nis2you_session | Maintains the logged-in user session. | Session |
| XSRF-TOKEN | Protection against CSRF attacks. | 2 hours |
| remember_* | "Remember me" (optional, on your request). | 5 years |
| signup_campaign | Campaign you arrived from, to count sign-ups per campaign (only if you came through a campaign link). | 30 days |
| cookie_consent (localStorage) | Remembers your choice about analytics cookies. | Until cleared |
| _ga, _ga_* | Google Analytics 4: audience measurement. Set only after you accept in the EEA, the UK and Switzerland; by default elsewhere unless you refuse. | Up to 2 years |
You can disable cookies in your browser settings. However, the Service requires session cookies to operate — without them, you will not be able to sign in.
We count unique visitors on the landing page and the dashboard without setting any cookie, using a short-lived cryptographic fingerprint (daily-rotating salt). In addition, if you accept the cookie banner, Google Analytics 4 (Google acts as a processor) sets the _ga and _ga_* cookies. If you decline, these cookies are not set. Advertising uses remain disabled. You can change your mind by clearing this site's data in your browser: the banner will reappear.
The technical detail is in the Privacy Policy, section "Pseudonymous audience measurement".