Cookie policy

We use a necessary session cookie called nucms_session to protect forms, prevent forged submissions, remember temporary form feedback and keep staff signed in. The cookie contains a session identifier; session data is stored on the server.

This is a first-party session cookie without a persistent expiry. Browsers normally remove it when the browsing session ends, although session restoration may retain it. The application expires sessions after two hours of inactivity. It is HttpOnly, SameSite=Lax and Secure in production.

The built-in CMS does not set analytics or advertising cookies. Acknowledging this notice stores only a version marker in sessionStorage for this browser tab, not tracking consent. You can block cookies in your browser, but forms and staff sign-in may stop working.

Configured external fonts and links may contact other providers. Cookies introduced by hosting services or additional integrations must be disclosed separately.