Cookie Notice

Last updated: September 7, 2026

What this notice covers

This Cookie Notice explains the cookies and similar browser storage that our website, nuflorist.com, uses, and how you control them. It goes with our Privacy Policy, which describes the information we handle more broadly.

Our website has no user accounts, no login, and no online store, so it uses very little browser storage. The only form on the site is the search box on our "page not found" page, which stores nothing. We use Google Analytics 4 only if you enable Analytics. If you enable Advertising and arrive through a tagged campaign link, the site can temporarily keep the campaign parameters and any referral identifier from that link while you continue to the Shopify App Store. No social pixel, OpenAI Pixel, remarketing tag, or advertising-network script runs on our pages.

What we set

Google Analytics sets its cookies only after you enable Analytics or choose Accept all. If you reject non-essential storage, leave Analytics off, or do nothing, no Google tag loads and no Analytics cookies are set. The items we store ourselves are "nf-consent-v3", which records your two purpose choices and the date you made them so the banner does not reappear on every visit, and — only after you enable Advertising and arrive from a tagged campaign link — the session-scoped "nf-campaign-attribution-v1" record described below.

NameTypePurposeDuration
"_ga" Cookie Google Analytics — distinguishes one visitor from another. Set only if you enable Analytics. Up to 2 years
"_ga_J90R9J4H9M" Cookie Google Analytics 4 — keeps track of session state. Set only if you enable Analytics. Up to 2 years
"nf-consent-v3" Local storage (not a cookie) Stores your Analytics and Advertising choices and the date you saved them, on your own device. It is not stored on our servers. 12 months, or until you clear it or change it
"nf-campaign-attribution-v1" Session storage (not a cookie) After you enable Advertising, temporarily keeps supported lowercase UTM campaign parameters, the landing pathname and language, and any "oppref" or "obref" referral identifier so they can accompany a Shopify App Store link. It never stores arbitrary query parameters, URL fragments, form fields, email addresses, phone numbers, customer data, or order data. Rejecting or withdrawing Advertising deletes it. Until you close the browser session, withdraw Advertising, or 30 days pass, whichever comes first
"nf-consent" and "nf-consent-v2" (legacy) Local storage (not a cookie) Choices saved by our earlier banners. They are no longer read as consent; if found, they are removed and the banner asks you again. Removed on your next visit
"nf-openai-attribution-v1" (legacy) Session storage (not a cookie) Superseded attribution record. If found, it is deleted. Removed on your next visit

The suffix in "_ga_J90R9J4H9M" is our Google Analytics measurement ID. The campaign-attribution record is first-party session storage and causes no advertising-network request on its own.

Consent and how to change your choice

On your first visit, the banner lets you choose Analytics and Advertising separately. Our Google tags run behind Google Consent Mode v2. The analytics_storage, ad_storage, ad_user_data, personalization_storage, and ad_personalization signals default to denied; the two personalization signals always stay denied, because the site has no personalization features.

  • Accept all enables both optional purposes. If your browser sends a Global Privacy Control signal, Accept all enables Analytics only and leaves Advertising off unless you turn it on in Manage choices.
  • Reject non-essential keeps every optional signal denied and sends Google an immediate denied update. Pressing Escape on the banner does the same.
  • Manage choices lets you enable or disable each optional purpose before saving.

Our Google Tag Manager container loads only after you enable Analytics; enabling Advertising alone loads no Google code. When Analytics is enabled, Google Analytics also receives named events for the site's lead buttons (the Shopify App Store link, the Calendly booking link, and the contact-email link) with the button label, page path, link destination without any query string, and page language, plus an event recording the consent choices you saved. No form contents or contact details are included.

Your saved choices take effect immediately and are remembered on this device in the "nf-consent-v3" key described above for 12 months, after which we ask again. You can reopen the panel and change your choices at any time using the button below, or the Cookie Preferences control in the site footer.

Third-party embeds

Apart from Google Analytics — which sets cookies only with your consent, as described above — no third party sets cookies through our pages. We do not embed ad networks, social-media widgets, remarketing trackers, social pixels, or an OpenAI Pixel. Consented campaign parameters can be appended to a Shopify App Store link; once you follow that link, Shopify's policies govern the destination.

Some links take you to another company's site — for example, our Calendly scheduling link or our YouTube demo video. Once you leave nuflorist.com, that other company's own privacy and cookie policies govern what happens there.

Our pages serve their fonts and script libraries from our own domain, so simply loading a page sends no request to a third-party font or script network.

Opting out of Google Analytics

Besides declining in our banner, you can opt out of Google Analytics anywhere you browse:

We use Google Analytics for measurement. Our Analytics property is linked to a Google Ads account so that aggregate conversion counts can be imported there; ads personalization is turned off on that link, and we do not use remarketing audiences.

Contact

Questions about this Cookie Notice, or about the information we handle, can go to info@nuflorist.com or to the data-request form linked in our Privacy Policy.