Cookie Policy
Effective Date: 01 January, 2026
Last updated: 27 August, 2026
This Cookie Policy should be read together with the Novagates Privacy Policy. It covers novagates.com and its NovaCom section, and describes the cookies, browser storage and third-party technologies this website actually uses today.
1.First-Party Technologies We Use
These run on every visit and cannot be switched off through Cookie Settings, because the site cannot function correctly without them.
NEXT_LOCALE (cookie)
Remembers whether you are viewing the English or Arabic site. Expires after 365 days.
__Secure-authjs.session-token and related sign-in cookies
Set only when you sign in to the dashboard, and keep you signed in, protect your session, and support fraud prevention. In production these are served only over HTTPS and carry the "__Secure-" prefix browsers require for that (the CSRF cookie instead carries "__Host-", a stricter variant): __Secure-authjs.session-token, __Secure-authjs.callback-url, __Host-authjs.csrf-token and __Secure-authjs.nonce. The browser keeps the main session cookie for 24 hours from when it is set. Two more, __Secure-authjs.pkce.code_verifier and __Secure-authjs.state, exist only for the sign-in redirect itself and expire within 15 minutes. None of these is readable by website scripts, by design.
cookie_consent (browser local storage)
Your Cookie Settings choice itself. Checked on every visit; you are asked again after 12 months, or sooner if this policy's cookie categories change.
2.Analytics
Both stay off until you grant Analytics consent through Cookie Settings; no analytics request is made and no analytics cookie is set before that choice. This was verified directly: on a fresh visit with no choice made, and again after choosing "Reject optional", zero requests to any analytics domain occur.
Google Analytics 4 -- _ga, _ga_1Z9J47K7ZX (cookies)
Measures visits, interactions and session behaviour. Set only after you grant Analytics consent. Google publishes a default lifetime of up to 2 years for these cookies; Google's script sets them directly, so an independent, exact figure cannot be confirmed from this site's code.
Microsoft Clarity -- _clck, _clsk (cookies), _cltk (session storage)
Measures interactions and session behaviour (heatmaps, session recordings) so we can improve the website. Set only after you grant Analytics consent. Microsoft's own defaults apply to _clck/_clsk for the same reason as above; _cltk is stored in your browser tab's session storage and is cleared when the tab closes. Clarity also contacts c.bing.com as part of the same measurement request when active.
3.Functional and Marketing
Cookie Settings lists Functional and Marketing as categories you can plan ahead for, but no technology in either category is deployed on this website today. Their toggles are shown disabled rather than hidden. If that changes, this policy will name the technology before it is activated.
4.Other Third-Party Technologies (Not Cookies)
A small number of requests to other domains happen on page load independently of your cookie choice, because they deliver an asset rather than track you. None of them sets a cookie. images.unsplash.com: stock photography used on some marketing pages; Unsplash receives your device's IP address when an image loads. cdn.jsdelivr.net: a script library used only on the API documentation page, loaded with Subresource Integrity so the file cannot be swapped without breaking; jsDelivr receives your IP address when that page is opened. cdn.novagates.com: our own content delivery domain for site assets.
5.Managing Your Choices
Cookie Settings is reachable from the floating control on every page and from the "Cookie Settings" link in the footer. You can Accept all, Reject optional, or choose per category, then Save preferences. Changes apply immediately, without reloading the page. Your choice is stored for 12 months; if it is missing, invalid or has expired, you will be asked again.
6.Changes To This Cookie Policy
We may update this Cookie Policy to reflect changes in the technologies we use or in applicable law. Material changes will be reflected in the "Last updated" date above.
7.Contact
For questions about this Cookie Policy, contact: Novagates Email: info@novagates.com Address: State of Kuwait