Cookie policy

noci.ai sets a region cookie and a consent cookie on every visit, and a security cookie when you send a form. Analytics cookies, including one that remembers how you found us, are set only with your consent outside the US; in the US they run by default and you can opt out.

Where you are decides the defaults

Only the US is implied consent. Everywhere outside the US, including the EU, the EEA, the UK and Israel, and when we cannot tell where you are, nothing that is not strictly necessary runs until you accept it in the cookie banner. If you decline, PostHog still counts the visit, but without cookies, without browser storage, without a visitor profile and without session recordings.

In the US, analytics runs by default and you can opt out. If your browser sends the Global Privacy Control signal, we treat it as an opt-out: no analytics cookies and no session recordings until you accept them in the banner. Advertising tags stay off under that signal either way, even after you accept in the banner.

Changing your choice

Every page’s footer has a control that reopens the cookie banner: Cookie settings, or in the US Do not sell or share my personal information. Your new choice applies straight away. If you withdraw your consent to marketing, the advertising tags stop loading from the next page, and the advertising cookies already set are the ones the ad platforms own: you can clear them in your browser.

If the banner cannot load (a content blocker, for example), pressing the same control opts you out on the spot, and it then reads No cookies or recordings from this browser. That means no analytics cookies are set and no session is recorded; PostHog still counts visits anonymously, without cookies. The noci_optout cookie listed below remembers the choice until you give a new answer in the banner.

Strictly necessary

These make the site work and carry no identifier. They are set whatever you choose.

Preferences you set

Analytics

Set only with your consent outside the US, and by default in the US.

noci_attr remembers how you first found noci.ai and the latest campaign that brought you back: campaign tags, the referring site and the page you landed on. It is sent with a form you submit. Ad click ids (from a Google or LinkedIn ad) are kept in this cookie, and sent with a form, only with your marketing consent; without it they stay in this tab’s session storage and are never sent. If you withdraw your marketing consent, click ids held in this tab’s session storage are not sent with a form and are not stored in a cookie. Before you have answered the banner outside the US, the attribution lives only in this tab’s session storage, unless you already have a noci_attr cookie. In the US, implied analytics writes the noci_attr cookie before any answer.

noci_exp is an experiment marker: when you accept analytics, this tab’s session storage remembers which variant of a page test you were shown, so the next page matches. It holds only a variant name, and it is removed if you withdraw your analytics consent.

Session recordings mask everything typed into a field.

Marketing

Set only with your consent to marketing outside the US. In the US they run by default, unless your browser sends the Global Privacy Control signal or you opt out. The Google Ads tag and the LinkedIn Insight Tag measure whether an ad led to a request for early access, a booked demo or a pricing estimate. They load only after that consent, on every page, and stop loading when you withdraw it. A tag that has not been set up for this site does not load at all.

When the Google Ads tag is on, a form you submit can also send Google a one-way hash (SHA-256) of the work email address you typed, never the address itself, so the ad can be matched to the request. That happens only after the submit and only with your marketing consent.

Who processes the data

  • Cookiebot (Usercentrics) runs the cookie banner and stores your choice.
  • PostHog (US cloud) receives analytics events and, with your consent, session recordings.
  • Google Ads and LinkedIn receive advertising measurement only with your marketing consent.
  • Amazon Web Services hosts the site, runs the security check on forms (AWS WAF) and receives what you send in a form.
  • Notion and Slack: what you send in a form is saved as a lead in our Notion workspace, and our team is notified in Slack with your name, company and email domain.

Last updated .