Cookie Policy
How Nisium uses cookies, browser storage, and similar technologies on nisium.com.
Last updated: June 20, 2026 · Version 1.1
This Cookie Policy explains how Expert Allies LTD ("we", "us") uses cookies and similar technologies when you visit nisium.com and use Nisium (the Service). It should be read with our Privacy Policy.
Capitalized terms not defined here have the meaning in the Privacy Policy.
1. What are cookies and similar technologies?
Cookies are small text files stored on your device. Local storage and session storage are browser mechanisms that store data on your device without expiring when the browser closes (local) or that clear when the tab closes (session). We refer to all of these as technologies below.
2. How we use technologies
We use technologies to:
- Keep you signed in and secure your session
- Remember preferences (e.g. language)
- Store your cookie consent choice
- Support vendor portal flows and demo authentication paths in development
When you accept non-essential cookies in our banner, we load Google Tag Manager (container `GTM-W7FL88FC`). GTM then loads tags on the public site, including Google Analytics 4 (measurement ID `G-XM1JBYD48D`) for usage analytics.
GTM runs only after you choose Accept all. If you choose Reject non-essential, we do not load GTM or its tags (including GA4).
3. Types of technologies
3.1 Strictly necessary
Required for authentication, security, and core functionality. These cannot be switched off in our banner without losing access to the Service.
| Name / key | Type | Purpose | Duration |
|---|---|---|---|
| ------------ | ------ | --------- | ---------- |
| Cognito / Hosted UI cookies | Cookie | Login and session with Amazon Cognito | Session / per Cognito policy |
| `cr_cognito_access_token` | sessionStorage | Cognito access token during login flows | Browser session |
| `cr_pending_login` | sessionStorage | Continue login after MFA step | Browser session |
| `cr_demo_token`, `cr_demo_user`, `cr_demo_active_tenant` | localStorage | Demo authentication (non-production / dev paths only) | Until cleared |
3.2 Functional
Improve usability; not strictly required for every page but expected for normal use.
| Name / key | Type | Purpose | Duration |
|---|---|---|---|
| ------------ | ------ | --------- | ---------- |
| `cr_demo_lang` | localStorage | UI language (English / Bulgarian) | Until cleared |
| `nisium_lang` | Cookie | UI language preference (`en` / `bg`) | 1 year |
| `cr_passkey_onboarding_done_*` | localStorage | Remember passkey onboarding completion | Persistent |
| Vendor portal UI keys | localStorage | Remember vendor questionnaire UI state | Until cleared |
3.3 Consent storage
| Name / key | Type | Purpose | Duration |
|---|---|---|---|
| ------------ | ------ | --------- | ---------- |
| `nisium_cookie_consent` | localStorage | Record accept/reject for non-essential cookies (analytics) | Until cleared |
3.4 Analytics (with consent)
When you choose Accept all on the cookie banner, we load Google Tag Manager as described in section 2. GA4 and any other analytics tags are fired through GTM, not by separate scripts in our application code. If you choose Reject non-essential, we do not load GTM or its tags.
| Provider / tool | ID | How it is loaded | Purpose | Duration |
|---|---|---|---|---|
| ----------------- | ----- | ------------------ | --------- | ---------- |
| Google Tag Manager | `GTM-W7FL88FC` | Directly from our site after consent | Tag management on the public site | Per Google / tags in the container |
| Google Analytics 4 | `G-XM1JBYD48D` | Via Google Tag Manager | Site usage analytics (pages, sessions, traffic sources) | Per Google Analytics policy |
Google Analytics may set cookies such as:
| Cookie | Purpose | Typical duration |
|---|---|---|
| -------- | --------- | ------------------ |
| `_ga` | Distinguishes users | Up to 2 years |
| `_ga_*` | Persists session state for GA4 | Up to 2 years |
Additional cookies may be set by tags configured inside Google Tag Manager. See Google’s privacy policy for how Google processes data.
4. Legal basis (EEA/UK)
- Strictly necessary technologies: legitimate interest / necessity to perform the contract
- Functional technologies: legitimate interest or consent where required by local law
- Non-essential / analytics: consent via our banner
5. Managing your choices
- Use the cookie banner on first visit: Accept all or Reject non-essential
- Clear site data in your browser settings to reset stored keys
- Block cookies in the browser — some features (especially sign-in) may stop working
For Cognito cookies, manage preferences in your browser or sign out of the Service.
6. Updates
We may update this Cookie Policy when technologies change. The Last updated date at the top of the published page will change accordingly.
7. Contact
Questions: privacy@expertallies.com
This document is effective as of June 20, 2026. Material changes will be posted on this page.