Legal

Cookie notice

The short version: two analytics tools, no advertising trackers, nothing sold or shared. Here is every cookie and storage key we set, and how to refuse them.

Last updated 28 August 2026.

What we set

Strictly necessary. These make the site work and are set whatever you choose.

  • noded-theme (local storage) - remembers whether you chose light or dark mode. No expiry; clear it by clearing site data.
  • noded_consent_v1 (local storage) - records the choice you made on the cookie banner, so we do not ask again. Without it we cannot honour your answer.

Analytics. Set only where permitted, and switched off entirely if you reject.

  • _ga and _ga_<id> (first-party cookies, Google Analytics 4) - distinguish one browser from another so we can count visitors rather than page loads. Expire after two years.
  • noded_vid (local storage) - a random identifier created only if you submit a form, so we can tell that the same person came back rather than treating every visit as a stranger. It is a meaningless string: it says nothing about you, and the analytics tool never receives your name or email address. Not created at all if you reject.
  • noded_ft (session storage) - remembers which campaign or referring site brought you here, so a demo booking can be credited to it. Cleared when you close the tab, and only written once you have accepted.
  • ph_<token>_posthog (first-party cookie and local storage, PostHog) - the same job as _ga for our heatmap tool: tells one browser from another. Expires after one year. Written only once you have accepted; before that, PostHog runs in memory and stores nothing on your device.

We do not set advertising or retargeting cookies. There is no Google Ads tag, no advertising pixel, and no session-recording or session-replay tool on this site. PostHog can record sessions; we have that switched off, and if we ever change our minds this page will say so first.

Who else sees anything

Google Analytics. We run a single Google Analytics 4 property. It processes your IP address to derive an approximate location and then discards it; we never see it. We do not send Google your name, email address or any other personal identifier, and we do not use Google Signals or advertising features.

PostHog. We use PostHog for heatmaps: where on a page people click and how far they scroll, aggregated across many visitors so we can see which parts of a page earn attention. It receives the element you clicked and the page URL, not what you typed - form fields are never captured. Like Google, it derives an approximate location from your IP address; we do not send it your name, email address or any other personal identifier, and no individual profile is built for anonymous visitors.

Google Fonts. Typefaces load from fonts.googleapis.com and fonts.gstatic.com. No cookies are set, but requesting a font necessarily discloses your IP address to Google.

Ipregistry. Once you accept, we make a single lookup per visit that tells us which organisation a network address belongs to - so we can see what kinds of companies find our writing useful. It returns a company name and domain, never a person, and we discard the result entirely when it resolves to an internet provider, a hosting company, a school or a government network rather than an employer. If you reject, or your browser sends Global Privacy Control, the lookup never happens.

Mailchimp. Only when you submit a form - the white paper request, the benchmark opt-in, or the contact form. Nothing is sent to Mailchimp merely by reading a page.

Calendly. Only when you click through to book a meeting. When you do, we pass along the campaign that brought you to us so we know which work is worth repeating. That is campaign information, not information about you.

Your choices

The banner. Nothing is stored on your device for analytics until you press Accept - wherever in the world you are. Before you answer, both tools run in a cookieless mode that cannot recognise you on the next page; if you reject, the heatmap tool does not load at all. This is stricter than the law requires outside Europe, and it is deliberate: we would rather measure less than measure you without asking. Reject simply records the refusal so we stop asking. Either way the choice is recorded and honoured.

Changing your mind. Use the Cookie preferences link, also in the footer of every page, and choose again.

Your browser. Most browsers let you block or delete cookies, and clearing site data for this domain removes everything listed above, including your recorded choice. Nothing on this site breaks if you do - you may just get the banner again and lose your theme preference.

Do Not Track and Global Privacy Control. We honour Global Privacy Control signals as a rejection of non-essential storage.

Why this page exists

We publish the design of our product and invite people to interrogate it. It would be inconsistent to be vague about what we run on our own website. If anything here is wrong or unclear, tell us at hello@getnoded.ai and we will fix it.

See also our privacy notice.