Cookie Policy
Last updated: August 10, 2026
The short version: Nova sets no cookies at all. Not one, on any page. We store five small items in your browser, every one of them needed to do something you asked for, and we measure traffic with an analytics tool that stores nothing on your device and never follows you to another site. This page lists all of it by name.
1. Cookies we set
None. Nova Exhibits does not set cookies on novaexhibits.com or novaexhibits.co.uk — not for analytics, not for advertising, and not for running the site. We have an automated test that fails our build if any page starts sending one, so this stays true rather than merely having been true when it was written.
We do use a small amount of browser storage, which is a different mechanism with the same privacy question attached, so we list it in full below rather than hiding behind the fact that it is not technically a cookie.
2. What we store on your device
Everything in this table is what the law calls strictly necessary: it exists to deliver something you actively asked for, and the site cannot do that thing without it. None of it is used for advertising, none of it is shared, and none of it identifies you to anyone else.
- nova_signin_email and nova_signin_intent — set only if you ask to sign in by email link. They remember which address you used and what you were doing, so that clicking the link in your inbox returns you to the right place. Cleared once you are signed in.
- Sign-in token — set only if you sign in, and stored by Google Firebase Authentication in your browser's IndexedDB. It is what keeps you signed in between visits. Removed when you sign out.
- nova_draft_v1 — the stand you are building in the configurator, saved on your own device so that a refresh or a closed tab does not lose your work. It never leaves your browser until you submit a quote or place an order. Artwork you upload is not included in it.
- nova_reorder — set only when you choose to re-order a past stand, and carries that stand into the configurator. Cleared as soon as it has been used.
- nova_region — remembers whether you are shopping in pounds or dollars, so we do not ask again on every page.
- nova_catalog_v1 — a copy of our own product list: names, sizes and prices. Kept so a page can show the right products immediately instead of rearranging itself once ours has loaded. It is our catalogue, not anything about you.
- nova_consent and plausible_ignore — your answer to the privacy banner. Stored so that we can honour your choice and stop asking. Refusing measurement is the one thing we have to remember in order to respect it.
3. How we measure traffic
We use Plausible Analytics, an EU-based, privacy-focused alternative to Google Analytics. It tells us how many people visited, which pages they read, and roughly where in the world they were. It does not set cookies, does not store anything on your device, does not assign you a persistent identifier, and does not follow you to other websites. No profile is built about you, and no data about you is ever sold.
Plausible is loaded through our own domain rather than from plausible.io, so your browser never contacts a third-party analytics server directly. Our server passes the request on. In doing so it forwards your IP address and browser user-agent to Plausible, which uses them to work out whether two page views came from the same person — by hashing them together with a salt that is thrown away every 24 hours. Neither your IP address nor your user-agent is stored by Plausible, and because the salt is destroyed daily, the same visitor cannot be recognised from one day to the next. All of it is processed and stored in the EU.
We record these events, and nothing else: a page view; and, when they happen, that a design was started, that a design was saved, that a quote was submitted, that a checkout was started, that a purchase completed, and that a page was not found. None of these carries your name, your email address, or anything else that identifies you.
4. Third parties
These are the only other companies your browser talks to while using Nova, and only in the situations described:
- Stripe — only when you check out. Payment details are entered on Stripe's own page and never reach us. Stripe sets its own cookies there, governed by Stripe's privacy policy.
- Google Firebase — only when you sign in or save a design. It provides our hosting, sign-in, and storage.
- Google Calendar — only on the booking page, which shows our calendar in a frame so you can pick a time. Google sets its own cookies inside that frame, governed by Google's privacy policy. It is a page of its own, and not part of any other page, so nothing is loaded from Google unless you go there to book something.
- Plausible Analytics — reached only through our own server, as described above.
We do not use advertising networks, social media pixels, session recording, heatmaps, or any cross-site tracking. Our fonts are hosted on our own servers rather than loaded from Google Fonts, specifically so that reading this page does not disclose your IP address to a third party.
5. Your choices
You can turn analytics on or off whenever you like, and change your mind as often as you want. Your choice is remembered for twelve months, after which we will ask again.
Analytics is on by default and the button above turns it off. We are able to do that, rather than having to ask first, because nothing about it is stored on or read from your device — the rules that require a consent banner before setting cookies simply do not apply when there is no cookie and no stored identifier. We count visits as a legitimate interest in understanding how the site is used, and the right that goes with a legitimate interest is the right to object, which is exactly what that button does.
Turning it off never affects your ability to use any part of the site, and nothing on Nova is withheld, delayed, or degraded because of it.
California residents. We do not sell your personal information and we do not share it for cross-context behavioural advertising, so there is nothing for you to opt out of on that front. The button above is nonetheless the place to switch off the only measurement we do, and we honour Global Privacy Control automatically — see below.
6. Browser signals
If your browser sends a Global Privacy Control (GPC) or Do Not Track (DNT) signal, we treat it as a decision to switch analytics off. We do that before showing you anything, so you will not see a banner asking a question your browser has already answered. You can still override it for this site using the button above.
7. Clearing what's stored
Every browser lets you clear site data from its settings, usually under "Privacy" or "Site settings". Doing so removes everything listed in section 2 — which will sign you out, discard any unsaved design, and cause the privacy banner to appear again. Nothing you have already submitted to us, such as a quote request or an order, is affected; to have that removed, use our data request form.
8. Contact
Questions about anything on this page? Email support@novaexhibits.co.uk. Our full Privacy Policy explains what happens to information you send us, as opposed to what is stored on your device.