Cookie Policy

Status: lawyer-ready draft. Not legal advice.

This policy explains how Nucleus uses cookies and similar technologies on the Nucleus website and app.

1. What Cookies Are

Cookies are small files placed on a device by a website. Similar technologies include local storage, pixels, tags, and device identifiers.

2. How Nucleus Uses Cookies

Nucleus uses cookies and similar technologies for:

• Essential service operation.
• Login and session security.
• Fraud prevention and rate limiting.
• Remembering user preferences.
• Payment and checkout flows through Stripe.
• Bot protection through Turnstile.
• Analytics and performance measurement where enabled.
• Support intake and status communication where enabled.

3. Cookie Categories

Essential Cookies

These are required for the service to work. They support authentication, security, tenant routing, checkout, CSRF protection where used, and basic service operation. They cannot be disabled through the cookie banner.

Functional Cookies

These remember preferences such as theme, workspace selection, and UI settings.

Analytics Cookies

These help measure site usage, performance, errors, and product adoption. They should only be enabled where the customer or visitor has given any consent required by law.

Marketing Cookies

These support campaign attribution and advertising measurement. They should only be enabled where consent is required and has been given.

4. Third Parties

Nucleus may use third party technologies from providers such as:

• Cloudflare for security, routing, and Turnstile.
• Stripe for checkout and billing.
• Email delivery providers for transactional email.
• Error tracking or analytics providers where enabled.

The current provider list must match the published subprocessor page.

5. Managing Cookies

Visitors can manage non-essential cookies through the cookie banner where it is shown. Browser settings can also block or delete cookies, but blocking essential cookies may stop Nucleus from working.

6. Customer Sites And Lead Capture

Customers may use Nucleus lead capture on their own sites or custom domains. Customers are responsible for publishing their own cookie notice and obtaining consent for cookies or tracking they enable on those sites.

Nucleus lead capture should not set marketing cookies unless a customer has configured them and has a lawful basis to use them.

7. Changes

Nucleus may update this policy when cookie use, subprocessors, or legal requirements change. The latest version should show the effective date.

8. Contact

Questions about cookies should be sent to `support@nucleushq.app` or the support route shown in the Nucleus app.