Cookie Policy (NEDIO)
Last updated: September 2, 2026
This Cookie Policy explains how NEDIO uses cookies and similar technologies on https://nedio.xyz (the “Service”).
NEDIO is operated by HAYZI LTD, a company registered in England and Wales (company number 15955089), trading under the brand NEDIO (“we”, “us”, “our”). Registered office: 69 Highgate West Hill, London N6 6BU, United Kingdom.
For broader details about how we process personal information, see Legal Docs/Privacy Policy.md.
1) What cookies are
Cookies are small text files stored on your device by your browser. They are commonly used to make websites work, keep you signed in, remember preferences, and measure how a site is used.
We also use similar technologies such as:
- Local storage (browser storage used to remember settings on your device)
- Pixels/tags (small scripts used to measure events such as sign-ups or page views)
2) How we use cookies
We use cookies and similar technologies for:
- Essential purposes (sign-in, security, and core app features)
- Analytics (understanding usage and improving performance) — only if you opt in
- Marketing measurement (measuring ad performance) — only if you opt in
3) Your choices (consent)
When you first visit, you can choose whether to allow Analytics and Marketing cookies. Essential cookies are always on because the Service cannot function properly without them.
You can change your preferences at any time using the in-app “Cookies” button.
We store your choice:
- in local storage as
nedio_cookie_consent, and - in cookies used to communicate your choice, including
nedio_analytics_consentandnedio_meta_consent.
Global Privacy Control (GPC)
If your browser has Global Privacy Control (GPC) enabled, NEDIO treats that signal as a request to disable Marketing cookies/measurement (for example, Meta Pixel/Conversions API), even if you previously enabled marketing cookies.
California “Do Not Sell/Share”
If you are in California, you may have the right to opt out of “sharing” personal information for cross-context behavioral advertising. You can opt out by disabling Marketing in the in-app cookie settings or by visiting /do-not-sell.
4) Cookies and technologies we use
Below is the full inventory. "Storage" says where the value lives: a cookie is sent to our servers with each request, local storage stays on your device until removed, and session storage is erased when you close the tab.
A) Essential — always on
These run without consent because the Service cannot work, be secured, or honour your own choices without them.
| Name | Purpose | Storage | Retention |
|---|---|---|---|
sb-… | Keeps you signed in. Set by Supabase, our authentication provider. Exact names vary. | Cookie | Session and refresh lifetimes set by the provider |
nedio_anonymous_id | Recognises a returning guest so free daily minutes can be counted without an account. Set by our server and not readable by scripts. | Cookie (HttpOnly) | 12 months |
nedio_cookie_consent | Records the choice you made in the banner. | Local storage | Until you clear it |
nedio_analytics_consent | Communicates your analytics choice to our server so it can honour it. | Cookie | 12 months |
nedio_meta_consent | Communicates your marketing choice to our server so it can honour it. | Cookie | 12 months |
nedio_legal_acceptance_v1 | Records which version of the Terms, Privacy and Cookie policies you accepted. | Local storage | Until you clear it |
| Vercel BotID | Distinguishes automated traffic from people, to protect the Service from abuse. Runs on every page regardless of your cookie choices. | Script and device storage set by Vercel | Set by the provider |
nedio_sprint_goal, nedio_done_when, nedio_session_id, nedio_live_client_id, nedio.ideConnectResume | Remember the sprint you are in the middle of, so a reload or a move between the web app and the editor extension does not lose it. | Local storage | Until you clear it |
nedio_profession, nedio_preferred_genres, nedio_personalization_done | Remember the preferences you chose, so you are not asked again. | Local storage | Until you clear it |
nedio_sticky_button_dismissed, nedio_sticky_button_dismiss_date, nedio_debug_mode | Remember that you dismissed a prompt, and developer-only diagnostics. | Local storage | Until you clear it |
nedio_landing_session_started_at, nedio_landing_view_sent, nedio_landing_view_attributed_sent, nedio_pending_public_landing_view, nedio_first_seen, nedio_engaged_session_fired | Prevent the same page view being recorded twice in one visit. They hold flags and a timestamp, not an identifier. | Session and local storage | Erased when you close the tab, or until you clear it |
B) Analytics — only with your consent
Nothing in this group is written until you allow Analytics, and choosing "Reject non-essential" removes what is already there.
| Name | Purpose | Storage | Retention |
|---|---|---|---|
nedio_attribution | Records how you first arrived — landing page, referring site, and any utm_*, gclid or fbclid parameters — so we can tell which campaigns bring people who stay. Written only after you allow Analytics, and deleted if you withdraw it. | Cookie and local storage | 30 days |
_ga, _ga_<container-id> | Google Analytics: distinguishes visitors and sessions. | Cookie | Up to 2 years |
_gid, _gat | Google Analytics: distinguishes visitors, and limits request rate. | Cookie | 24 hours and 1 minute |
| Vercel Analytics | Measures traffic and page performance. | Set by the provider | Set by the provider |
C) Marketing measurement — only with your consent
Nothing in this group is written until you allow Marketing. If your browser sends a Global Privacy Control signal we treat that as a refusal, whatever the banner says.
| Name | Purpose | Storage | Retention |
|---|---|---|---|
_fbp | Meta Pixel: identifies a browser so an ad can be matched to a sign-up. | Cookie | Up to 3 months |
_fbc | Meta Pixel: stores the click identifier from an ad you followed. | Cookie | Up to 3 months |
_gcl_au | Google: attributes a conversion to an ad. Removed when Marketing is refused. | Cookie | Up to 3 months |
The Meta Conversions API also sends event data from our server when marketing consent is granted. It is not a cookie, but it uses the identifiers above, plus your IP address, user agent, and — where you have given it in a relevant flow — your email address in hashed form.
5) Managing cookies through your browser
You can also manage cookies using your browser controls, including blocking or deleting cookies. Note that blocking essential cookies may prevent sign-in or other functionality from working.
Because browsers vary, refer to your browser’s help documentation for cookie settings:
- Chrome: Settings → Privacy and security
- Safari: Settings → Privacy
- Firefox: Settings → Privacy & Security
- Edge: Settings → Cookies and site permissions
6) Changes to this Cookie Policy
We may update this Cookie Policy from time to time. We will update the “Last updated” date and, where required by law, provide additional notice.
7) Contact
Questions about cookies or your preferences: support@nedio.xyz
Postal address: HAYZI LTD, 69 Highgate West Hill, London N6 6BU, United Kingdom