QuoteNod Cookie Policy (v2026-10-10)

QuoteNod sets only essential cookies — the ones the service cannot work without.
This is the complete list:

qn_s — your sign-in session. Set when a trader or a member of their team logs in;
HttpOnly, Secure and SameSite; expires after 30 days or on logout. Without it, staying
signed in is impossible.

qn_c — a customer's sign-in to their portal, set when they enter their access code
and limited to the portal pages; HttpOnly, Secure and SameSite, and removed when they
sign out or it expires.

qn_2fa — set for five minutes between entering your password and entering your
two-factor code, on accounts that have two-factor authentication switched on. It says
only "this browser has given the right password for this account" and opens nothing but
the code page. It is removed the moment you sign in or it expires.

qnpin_… — set on a customer's browser when they enter the access code for a quote,
completion sign-off or payment-plan change, so they are not asked for the code again on
every page of that one document. One per document; it holds no personal data and is
removed when the browser closes.

qn_notice — records that you dismissed the one-time notice explaining our cookies
and policies, so we don't show it to you again. Expires after 12 months.

qn_mail_device and qn_mail_unlocked — used only by QuoteNod Mail, for accounts
that have it: one remembers a device you have approved for reading your mail, the other
that you have unlocked a protected folder in this session.

When a page fails, QuoteNod records the fault so it can be fixed — see the Privacy
Notice. That record is made on our own servers and uses no cookie and no identifier:
nothing is stored in your browser for it, and it cannot be tied back to you or to a
session.

Announcements, the reactions on them and the comments underneath use no cookie.
What you said and how you reacted are stored on our servers against your account,
because that is what lets a comment carry your name and a reaction be counted once —
nothing about any of it is kept in your browser.

QuoteNod sets no analytics, advertising or third-party cookies of any kind, on any
page — including the quote approval and completion pages your customers open. Because
every cookie we set is strictly necessary, the law does not require an opt-in consent
box — the notice you see on your first visit is exactly that, a notice: it tells you
what we use and links to these policies, and using the site constitutes agreement to
them.

Page-view counting, without a cookie. Our web host, Cloudflare, adds its Web
Analytics counter to the pages we serve. It sets no cookie, stores nothing in your
browser, uses no identifier and does not follow you between sites; it tells us only
totals — how many times a page was seen, from which country and on what kind of
device. It is not the kind of analytics that needs your consent, and nothing about
you as an individual is in what it gives us.

Your browser may also keep four small settings of its own on your device, not as
cookies: whether Nod speaks his answers aloud, how you last laid out the diary, the
text size you chose with the A− and A+ buttons in the page footer, and whether you
chose the light or the dark look of the public site. None of them leaves your device.

Payments are made on the payment provider's own pages — Stripe's, for QuoteNod
subscriptions and for traders who take payment through Stripe, and GoCardless's for
traders who use GoCardless. Those pages are not QuoteNod's and set their own cookies
under Stripe's cookie policy and
GoCardless's cookie policy respectively.

If this policy ever changes materially, the version number above will change and
account holders will be asked to review it.