Northstar Data Services Northstar Data Services Northstar Pick · MultiValue · Web · AI
  • About
  • Services
  • Writing
  • Contact
All disclosures
Disclosure

Cookie Policy

Last updated May 19, 2026
On this page
  1. What cookies are
  2. Cookies on the marketing site
  3. Cookies in Northstar Business
  4. Third-party cookies
  5. Your choices
  6. "Do Not Track" and GPC
  7. Changes
  8. Contact

Cookies are small text files placed on your device when you visit a website. They let the site recognize your browser between requests — useful for things like keeping you logged in or measuring traffic. This page lists what cookies and similar storage we use, and how to opt out. We do not run a consent banner; we provide disclosure-only and rely on browser-level controls.

What cookies are

Cookies, local storage, and similar mechanisms all do the same job: they let a website remember something between page loads. We refer to all of them as "cookies" here for brevity. We split them into two categories:

  • Strictly necessary. Required for the site or platform to function. Examples: session and authentication cookies, CSRF protection. You can't turn these off without breaking the service.
  • Analytics. Help us understand how visitors use the site so we can improve it. Examples: Google Analytics 4 cookies on the marketing site.

We do not run advertising, retargeting, social-media tracking pixels, or third-party marketing cookies on our properties.

Cookies on the marketing site

On northstardata.com (the marketing site you are reading right now), the following cookies and storage may be set:

Cookie / storageSet byPurposeDuration
_gaGoogle Analytics 4Distinguish unique users for traffic analytics2 years
_ga_P60077HYKPGoogle Analytics 4Persist session state for the GA4 property2 years
__cf_* / cf_*CloudflareBot protection, security challenges, basic CDN functionalityUp to 1 year

The GA4 property used is G-P60077HYKP. We use GA4's built-in IP anonymization. We do not enable Google Signals or cross-device tracking. We do not link GA4 to advertising products.

Cookies in Northstar Business

On the Northstar Business platform (app.northstardata.com, admin.northstardata.com, and tenant subdomains), the following types of cookies are set:

TypePurposeDuration
Session cookieKeep you logged in across requestsSession, or until you log out
CSRF token cookieBlock cross-site request forgery attacksSession
UI preference cookiesRemember small UI choices (collapsed panels, tab selection, etc.)Up to 30 days
Cloudflare cookiesBot protection, security, edge routingUp to 1 year

All of these are strictly necessary or near-strictly-necessary for the platform to work. Turning them off will break sign-in.

Third-party cookies

Two third parties set cookies on our domains as part of providing services to us:

  • Google — via Google Analytics on the marketing site (see table above). Google Privacy Policy.
  • Cloudflare — via security and edge cookies across the site and platform. Cloudflare Privacy Policy.

When you connect a third-party account to Northstar Business (Google, Meta, LinkedIn, Bing), those platforms may set their own cookies on their own domains as part of the OAuth flow. That is outside the scope of this policy and governed by their cookie policies.

Your choices

  • Browser settings. Every modern browser lets you block or delete cookies for specific sites. See your browser's documentation. Blocking strictly necessary cookies will break sign-in.
  • Google Analytics opt-out. Install the Google Analytics Opt-out Browser Add-on to disable GA4 across all sites.
  • Cloudflare. Cloudflare cookies are baseline security infrastructure; we can't disable them without removing protection. They contain no personal information about you that we can read.

Because we do not have an EU/EEA customer base today, we do not display a cookie consent banner. If we add EU/EEA customers in volume, we will revise this policy and add the consent mechanism that European law requires.

"Do Not Track" and Global Privacy Control

Web browsers vary in how they handle Do Not Track signals and the newer Global Privacy Control (GPC) header. Because there is no consistent industry standard, we do not currently respond to DNT or GPC signals. We will revisit if a clear standard emerges or if California regulation requires it.

Changes

If we add or remove a category of cookies, we update this page and the "Last updated" date at the top. Material changes will also be mentioned in the Privacy Policy revision history.

Contact

Questions about cookies or tracking: [email protected].

Related disclosures. See the Privacy Policy for the broader picture and the AI Usage Disclosure for AI-specific transparency. Everything is indexed at the Disclosures hub.
© 2026 Northstar Data Services Inc. Disclosures
About Services Writing Legal