Cookie Policy

We keep this simple, because our usage is simple

Most of what we use is strictly necessary or cookie-free. The exception is the advertising and conversion measurement described in Section 4, which we use to see whether our ads actually lead to sign-ups. Here is everything we use:

1. Session cookie (strictly necessary)

When you log in, we set a session cookie so the Site knows you're authenticated as you navigate between pages. This cookie is required for login to function and cannot be disabled while remaining logged in. It is not used for advertising or cross-site tracking, and it expires automatically.

2. Local storage (not a cookie, stays on your device)

We use your browser's local storage — a mechanism similar to cookies but never transmitted to our servers — for two small preferences:

• Remembering that you dismissed the site announcement banner, so it doesn't reappear on every page.
• For admin users only, remembering whether the admin sidebar is collapsed or expanded.

You can clear this at any time by clearing your browser's site data for nationalonlinesellers.org.

3. Analytics (no cookies)

We use Plausible Analyticsto understand aggregate traffic to the Site. Plausible does not use cookies, does not collect personal data, and does not track you across other websites. It cannot identify you individually.

4. Advertising and conversion measurement

We advertise NOSA on third-party platforms, and we use those platforms' advertising tags and pixels to measure which ads actually lead to someone creating a profile or becoming a member. These tags may set cookies, may use local storage, and can recognise your browser across other sites that run the same tag. They record a conversion when an action such as a sign-up completes.

This is advertising measurement rather than analytics, and it is the only cross-site tracking on the Site. The platforms we currently use for this are:

• X (formerly Twitter) —privacy policy,personalisation settings
• Meta (Facebook and Instagram) —privacy policy,advertising preferences
• OpenAI (ChatGPT advertising) —privacy policy

For US visitors, Meta advertising is enabled by default unless you opt out or use Global Privacy Control. Outside the US, tracking starts after you allow it. We use Meta Pixel to measure public-page visits and build website visitor audiences. We also report completed registrations, checkout starts and confirmed initial membership payments through Meta’s Conversions API. Matching information may include a hashed email address, Meta browser identifiers, IP address and browser details. These reports do not include your profile, address, date of birth, prescription, provider-search, card or booklet information. Meta tracking is excluded from benefit tools, private account screens, admin pages and public seller profile pages. You can withdraw permission using advertising preferences in the footer. We honor Global Privacy Control for this tracking. Withdrawing permission stops future reporting and cancels pending reports; it cannot retract reports already delivered to Meta.

For US visitors, Google advertising is enabled by default unless you opt out or use Global Privacy Control. Outside the US, tracking starts after you allow it. We use Google Ads tags on eligible public pages to measure visits, completed registrations and checkout starts, and to build website visitor audiences. Confirmed initial membership payments may be reported through Google’s Data Manager API with hashed email and Google advertising click identifiers. Google tracking is excluded from benefit tools, private accounts, admin pages and public seller profiles. Profile, address, date of birth, prescription, provider-search, card and booklet details are excluded. Use Advertising preferences in the footer to withdraw permission. We honor Global Privacy Control. Withdrawal stops future reporting and cancels pending reports; it cannot retract data already delivered to Google. Google Ads privacy policy

We may add or remove advertising platforms as our campaigns change, and this section is kept current when we do. Each platform's tag is governed by that platform's own privacy policy, not by NOSA directly.

Reporting that does not use cookies. When you create an account, our server also reports that sign-up directly to the advertising platform so the ad that brought you here can be credited. That report includes a one-way scrambled (hashed) form of your email address, never the address itself, so the platform can match it against an account it already has without us handing over your email. Because this happens on our server rather than in your browser, a content blocker will not prevent it — if you would rather it did not happen, see the opt-out options below.

How to opt out. Use the platform's own advertising settings linked above, turn on your browser's tracking protection, or use any standard content blocker. Blocking these tags does not affect your ability to sign up, log in, or use any part of the Site. We do not gate content or functionality on advertising tags loading.

5. Affiliate and referral programme

We run an affiliate programme: independent partners promote NOSA and earn a commission when someone they referred joins. This is separate from the advertising measurement above, and it works differently, so we describe it separately.

If you arrive through a partner’s referral link (a link carrying an aff parameter), we store that partner’s identifier in a cookie for 7 days so the right partner is credited if you go on to create an account. Two cookies can be involved: nosa_partnero_aff, set by us, andpartnero_partner, set by our affiliate platformPartnero(privacy policy). Neither identifies you personally — they identify the partner.

What we share with Partnero, and when. If you create an account, we send Partnero your email address, yourname, and your NOSA account identifier, so that the account can be matched to the referring partner and to any later purchase. If you then buy a membership, the Founding Member fee, or a product, we send the amount, currency, and what type of purchase it was — never your card details, which we never hold. Unlike the advertising reporting described above, this is not hashed: Partnero receives your actual email address, because the partner’s commission has to be attached to a real, identifiable account.

How to opt out. A content blocker will stop Partnero’s script from loading, but our own referral cookie and the account information above are handled by our server, so blocking scripts does not prevent them. If you do not want to be associated with a referring partner, visit the Site directly rather than through a referral link, or clear the cookie before signing up. You can also ask us to remove the association after the fact — see the contact details below.

5. Payment processing

When you make a payment, our payment processor Stripe may set its own cookies as part of its fraud-prevention and checkout functionality. These are governed byStripe's own privacy policy, not by NOSA directly.

Questions

See our Privacy Policy for more detail on how we handle information generally, or contactsupport@nationalonlinesellers.org.