Cookie Policy
1. What are cookies?
Cookies are small text files stored on your device by your browser. They are used to keep you logged in, remember your preferences, and ensure the service works correctly.
2. Cookies we use
NugLab uses strictly necessary, functional and analytics cookies. We do not use advertising or behavioural tracking cookies.
Marketing website (nuglab.app)
| Cookie | Type | Duration | Purpose |
|---|---|---|---|
| cookie-analytics | Functional | Persistent | Stores your analytics consent choice (accepted or rejected). Stored in localStorage, not a server cookie. Set when you interact with the cookie banner. |
| _ga | Analytics (Google) — optional | 2 years | Google Analytics 4 — distinguishes unique visitors. Set by Google LLC. Only placed if you accept analytics cookies. |
| _ga_G-JNM91GPDND | Analytics (Google) — optional | 2 years | Google Analytics 4 — persists session state. Set by Google LLC. Only placed if you accept analytics cookies. |
No server-side cookies are set by nuglab.app itself. Google Analytics is used to understand aggregate traffic patterns; no personally identifiable information is sent to Google.
Application (grower.nuglab.app)
| Cookie | Type | Duration | Purpose |
|---|---|---|---|
| sb-[ref]-auth-token | Strictly necessary | Until sign-out or token expiry | Keeps you authenticated. Set by Supabase after login. |
| sb-[ref]-auth-token-code-verifier | Strictly necessary | Session only | Security token for the OAuth PKCE login flow. Deleted immediately after login completes. |
Affiliate tracking (functional)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| nuglab_ref | Functional | 30 days | Stores the affiliate referral code when you visit a nuglab.app/grow-with/… page. Set with domain=.nuglab.app so it is readable by both nuglab.app and grower.nuglab.app. Only set if you arrive via an affiliate link. Deleted automatically once sign-up completes. |
| nuglab_pending_ref (localStorage) | Functional | Until sign-up completes | Temporarily stores the referral code in the browser's localStorage during the sign-up flow so affiliate attribution is applied after account creation. Not a server cookie. Deleted immediately after the referral is applied. |
3. Analytics cookies (Google Analytics 4)
NugLab uses Google Analytics 4 (property ID G-JNM91GPDND) on nuglab.app to measure anonymous traffic and understand how visitors use the marketing website. Data is processed by Google LLC (USA) under the EU-US Data Privacy Framework. IP anonymisation is enabled; no personally identifiable information is shared with Google. NugLab does not use Facebook Pixel or any other advertising or behavioural tracking technology.
You can opt out of Google Analytics tracking at any time by installing the Google Analytics Opt-out Browser Add-on.
4. Managing cookies
The authentication cookies listed above are strictly necessary — the app cannot function without them. You can clear them at any time by signing out or clearing your browser's site data for grower.nuglab.app.
All major browsers allow you to view, block or delete cookies in their privacy settings. Blocking the authentication cookies will prevent you from staying signed in.
5. More information
For full details on how we process personal data, see our Privacy Policy. Questions about cookies: info@nuglab.app.