Cookie policy
How NerdPortal uses necessary cookies and website analytics.
Last updated 19 August 2026
In short
We set cookies that are strictly necessary to run the dashboard — keeping you signed in and protecting forms against cross-site request forgery. We do not set advertising cookies. On our marketing website, we use Google Analytics to understand traffic and improve the site. We do not set advertising cookies.
The guest portal your visitors see sets no cookies of its own at all.
Website analytics
We use Google Analytics 4 on the NerdPortal marketing pages to count visits and understand which pages are useful. Google may set analytics cookies and receives the page URL, browser and device information, and an approximate location derived from your IP address. We enable IP anonymisation and do not send guest portal form contents or account details to Google Analytics.
You can block or delete analytics cookies using your browser's privacy controls.
Dashboard cookies
These are set on nerdportal.unifinerds.com when you sign in to manage your account. All are strictly necessary — the dashboard cannot function without them, so they do not require consent under the GDPR or the ePrivacy Directive.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
next-auth.session-token | Keeps you signed in and identifies your account on each request. | 30 days | Necessary |
next-auth.csrf-token | Protects sign-in and account forms against cross-site request forgery. | Session | Necessary |
next-auth.callback-url | Returns you to the page you were heading for after signing in. | Session | Necessary |
On HTTPS these are issued with the __Secure- or __Host- prefix, and are marked HttpOnly so page scripts cannot read them.
The guest portal
The captive portal your guests land on does not set cookies. It reads the device identifiers your UniFi controller passes in the address — the MAC address and access point — and sends them with the form. Nothing is stored on the guest's device.
What happens to the form contents afterwards is covered by our privacy policy.
What we do not set
- No advertising or retargeting cookies
- No cross-site tracking pixels
- No analytics on captive guest portals or signed-in dashboard pages
- No social media embeds that set cookies on our behalf
If that ever changes we will update this page before the cookies appear, and ask for consent where consent is required.
Controlling cookies
Every major browser lets you view, block and delete cookies from its privacy settings. Blocking the cookies listed above will sign you out and prevent you from signing back in — they are how the dashboard recognises you — but it will not affect a guest portal.
If you run a portal
The custom CSS field lets you change how your portal looks. It does not let you inject third-party scripts, so you cannot accidentally introduce trackers into a page your guests are compelled to visit in order to get online.
If you send guests to your own site with a redirect URL after they connect, whatever cookie and consent obligations apply to that site are yours to meet.
Changes and contact
Updates to this policy appear here with a revised date at the top. Questions go to privacy@unifinerds.com, or use the contact page.