Nanabase Cookie Policy
Last updated: October 20, 2026 Effective date: October 20, 2026
This Cookie Policy explains how Nanabase ("Nanabase", "we", "us", or "our") uses cookies and similar technologies (collectively, "cookies") on the Nanabase web app (app.nanabase.co) and website (www.nanabase.co) (the "Service"). The nbTap iPhone app does not use cookies. It should be read together with our Privacy Policy.
1. What cookies are
Cookies are small text files placed on your device when you visit a website. They allow the site to recognize your device, keep you signed in, remember preferences, and understand how the site is used. We also use related technologies such as local storage and session storage, which serve similar purposes and are covered by this Policy.
2. Categories of cookies we use
These are required for the Service to function and cannot be switched off:
__Secure-nanabase_session. A signed, HTTP-only,Secure,SameSite=Laxsession cookie with a 7-day lifetime that keeps you authenticated after sign-in. Because it isSameSite=Lax, it also provides cross-site request forgery (CSRF) protection — the Service does not set a separate CSRF cookie. Rate limiting and abuse prevention are performed server-side and do not rely on cookies.nanabase_last_company. A signed, HTTP-only,SameSite=Laxcookie (7-day) that records which company workspace you last used so the Service routes you to the correct tenant after sign-in.- Sign-in flow storage. Short-lived browser
sessionStorage(not a cookie) used during the magic-link sign-in flow to carry your email address and the legal-document versions you accepted from the login screen to account creation. It is cleared when the flow completes.
Functional
sv-privateandsv-company-<id>. Small first-party cookies (24-hour,SameSite=Lax) that store an opaque version stamp of your contact data so the app can tell whether its locally cached copy is still fresh and avoid an unnecessary re-fetch. They contain no personal data.
The Service sets no other functional or preference cookies; if we introduce any, we will update this Policy.
Analytics and performance
The web app uses Vercel Web Analytics and Vercel Speed Insights for traffic and performance measurement. Vercel describes both as cookieless: they do not store cookies on your device or track you across sites. The Service does not set advertising or cross-site tracking cookies. If we ever introduce non-essential cookies, we will ask for your consent first where the law requires it.
The website (www.nanabase.co)
The website does not run advertising, remarketing, analytics or session-recording
tags and does not use cookies for analytics, advertising or tracking. Because it
sets no non-essential cookies, it shows no cookie banner. It stores the plan you
clicked in your browser's session storage so that the waitlist form can include
it; this is cleared when you close the tab. An earlier version of the website
stored a cookie-choice entry (cookie_consent) in your browser; it is no longer
used and you can clear it.
3. Third-party cookies
The Service is designed to avoid non-essential third-party cookies. Vercel Web Analytics and Speed Insights are cookieless, and our error-monitoring provider (Sentry) does not set cookies in your browser through the Service. The providers that help us run the Service are listed in the Privacy Policy, and any data they process is governed by their own policies in addition to this one. Should we introduce a third-party cookie in the future, we will update this Policy and obtain consent where required.
4. Managing cookies
You can control and delete cookies through your browser settings. Blocking strictly necessary cookies will prevent you from signing in and using authenticated areas of the Service. Because we do not set non-essential cookies, there is no cookie-preference setting to change.
5. Changes to this Policy
We may update this Cookie Policy from time to time. Material changes will be
reflected by a new version and communicated through the Service.
6. Contact
Questions about this Cookie Policy may be directed to privacy@nanabase.co or to BRBR GROUP LLC, Sheridan, Wyoming, USA.
