Cookie Policy

Last updated: 2026-07-11

This Cookie Policy explains how Nomad Insurance Broker OÜ ("Nomadsurance", "we", "us") uses cookies and similar technologies on nomadsurance.com. It is intentionally short because, frankly, we use very few cookies. We believe a cookie policy should describe what actually happens on the site, not list categories that sound impressive but don't apply.

1. What cookies are

A cookie is a small text file that a website asks your browser to store on your device. Cookies can remember things like whether you are signed in, what language you prefer, or whether you have already dismissed a banner. Similar technologies, such as localStoragesessionStorage, and pixel tags, work in comparable ways and are covered by this policy where relevant.

Cookies can be set by the website you are visiting (first-party) or by a third party whose service is embedded on that website (third-party). They can also be classified by lifespan: a "session cookie" disappears when you close your browser, while a "persistent cookie" stays until it expires or you delete it.

2. How we use cookies on Nomadsurance

We keep this deliberately lean. Two things touch storage on your visit: Google Analytics, which we use to see which pages get read and where people run into trouble, and a small amount of essential storage that keeps the site working.

We load Google Analytics 4 through Google Tag Manager. It sets analytics cookies (see section 3.2) and sends usage data to Google. We do not run advertising, retargeting, or social media pixels: no Google Ads, no Meta Pixel, no LinkedIn Insight Tag, no TikTok Pixel, no Hotjar. We do not build advertising profiles, we do not share your browsing data with ad networks, and we do not sell your data.

3. Cookie categories present on this site

3.1 Strictly necessary

These are required for the site to work. They are set without consent because the law treats them as essential.

• Quote form session state: when you use /get-quote, short-lived sessionStorage entries may hold the data you have entered so you don't lose progress if you navigate between steps. These are cleared when you close the tab.
• Sanity Studio session: if you visit /studio (our content management interface, used by staff), Sanity sets authentication cookies so editors can sign in. This applies only to logged-in editors, not to public visitors.

3.2 Analytics

We use two analytics tools, and they behave differently:

• Vercel Analytics and Vercel Speed Insights are cookieless by design. They set no cookies and store no identifier in your browser. Aggregated, anonymised events (page path, country, basic device class, performance timings) are sent to Vercel.
• Google Analytics 4, loaded through Google Tag Manager, does set cookies. It stores _ga and _ga_<id> cookies to recognise returning visitors and measure how the site is used, and it sends this usage data to Google (see section 4). These cookies typically last up to two years unless you clear them.

Google Analytics currently loads on every visit rather than after a consent click. You can stop it at any time: block cookies for nomadsurance.com in your browser, or install Google's official opt-out add-on at https://tools.google.com/dlpage/gaoptout.

3.3 Marketing and advertising

None. We do not run advertising, retargeting, or social media tracking cookies on this site. Advertising cookies legally require your prior consent, so if we ever add them we will introduce a proper consent step before any such cookie is set.

4. Third-party services and their cookies

A few infrastructure providers may set technical cookies as part of delivering the site to you:

• Vercel (United States / EU regions): our hosting platform. Vercel may set strictly necessary cookies for load balancing, security, and bot protection. Vercel Analytics itself is cookieless, as noted above.
• Cloudflare (where applicable): used as part of the network and CDN layer. Cloudflare may set technical cookies such as __cf_bm (bot management) and cf_clearance (security challenges). These exist to protect the site from abuse and are considered strictly necessary.
• Sanity (content management): only relevant if you access /studio as a logged-in editor; not used for public visitors.
• Google (United States): we use Google Analytics 4 and Google Tag Manager. Tag Manager loads our analytics tag; Google Analytics 4 sets the _ga cookies described above and processes usage data on Google's servers in the United States. This involves a transfer of data outside the EU/EEA under Google's own terms and safeguards. See Google's privacy policy at https://policies.google.com/privacy.

Aside from Google Analytics, we do not control the exact cookies infrastructure providers set on a per-request basis, but we choose providers that limit themselves to operational and security purposes rather than advertising.

5. How to control cookies

You can control the Google Analytics cookies and everything else:

• Google Analytics opt-out: install Google's official opt-out add-on at https://tools.google.com/dlpage/gaoptout to stop Google Analytics on every site, including ours.
• Browser settings: every major browser (Chrome, Firefox, Safari, Edge, Brave, Arc) lets you view, block, and delete cookies and site storage. Look under Settings → Privacy.
• Do Not Track / Global Privacy Control: we respect these signals as part of our default posture.

Blocking strictly necessary cookies or storage may break parts of the site (for example, the quote form or the studio sign-in). Blocking or opting out of Google Analytics does not change how the site works for you.

6. Changes to this policy

We will update this policy whenever we introduce new tools, change providers, or are required to by law. The "Last updated" date at the top will always reflect the most recent change, so it is worth checking back here after any material change (for example, adding a new category of cookie).

7. Contact

Questions, concerns, or data subject requests related to cookies and tracking:

Nomad Insurance Broker OÜ Email: —

We try to respond within a few working days.

Disclaimer: First draft, pending legal review.