Legal
Cookie Policy
Last updated: 29 October 2026
“New Map”, “we” and “us” below mean the team that runs the New Map website and platform. This policy lists what New Map stores on your device when you use the website and the platform, and why. We store what is strictly necessary to run the service (including, where enabled, a short-lived bot-check cookie on the login and contact forms) and two functional preferences. One further cookie, which records the link that brought you to the site, is set only if you accept it in the cookie notice. We do not use analytics, advertising or cross-site tracking cookies.
1. Cookies and local storage
A cookie is a small text file a website stores in your browser and reads back on later requests. Local storage is a browser feature that keeps a small value on your device without sending it to the server. Under § 25 TDDDG and Article 5(3) of the ePrivacy Directive, storing or reading information on your device needs consent unless it is strictly necessary to provide the service you asked for. Everything in the table below falls under that exception except the attribution cookie, which we set only with your consent. The language cookie stores only the language you picked in the language switcher, so the site shows you the language you asked for; it is strictly necessary for that and needs no consent.
2. Exactly what we store
| Name | Type | Set by | Purpose | Retention |
|---|---|---|---|---|
| nm-access-token | Strictly necessary cookie (Secure, HttpOnly, SameSite) | New Map | Keeps you signed in to your portal between pages and visits. | Session; deleted on sign-out. |
| sb-* | Strictly necessary cookies | Supabase (our authentication provider) | Complete sign-in, magic links and password resets securely. | Sign-in flow; short-lived. |
| nm_lang | Strictly necessary cookie, first-party | New Map | Remembers the language you chose in the language switcher, so the site opens in that language. Set only when you pick a language. | One year. |
| nm-theme | Functional, local storage | New Map | Remembers your light or dark theme choice. | Until you clear it. |
| nm-cookie-consent | Functional, local storage | New Map | Remembers whether you accepted or declined the attribution cookie, so the notice does not ask again. | Until you clear it or change your choice. |
| cf_* and __cf_bm | Strictly necessary cookie | Cloudflare (bot protection on the login and contact forms, only where the check is enabled) | Tells a human from a bot so the form can be submitted. | Up to 30 minutes. |
| nm_src | Attribution cookie, first-party; set only if you accept | New Map | Records which link or campaign brought you to the site: the utm parameters, the referring site's name and the first page you opened. If you then book a call or become a client, that source is stored with your account so we can see which channels bring customers. Never shared with third parties and not used for advertising. | 90 days; deleted when you decline. |
3. What we do not use
No Google Analytics or other analytics scripts, no advertising or remarketing pixels, no social media plugins, no fingerprinting, and no third-party embeds that set cookies on our pages other than the Cloudflare bot check on the login and contact forms, where it is enabled. If you connect your own Google Analytics property in the portal, that is a server-side data connection you authorise; it sets nothing in your browser on our site.
4. Third-party pages you choose to open
Booking a call opens Calendly on Calendly's own pages. Cookies set there are governed by Calendly's policy and apply only while you are on its pages.
5. How to control storage
You can accept or decline the attribution cookie in the cookie notice, and change your choice at any time below; declining deletes it. You can also delete or block cookies and local storage in your browser settings. Blocking the session cookie signs you out and prevents sign-in; clearing the two preferences resets the theme and shows the cookie notice again.
6. Changes
If we add any other non-essential storage, we will update this page, ask for your consent first with a real accept and decline choice, and set nothing until you have chosen. The date at the top is the current version.