Practical information
Cookies
Necessary cookies are used for language and security. Optional attribution, analytics and marketing measurement are used only after consent.
Last updated:
How language selection works
You can always visit /no for Norwegian or /en for English. At /, the browser language is used. Norwegian, Bokmal and Nynorsk settings select the Bokmal translation. Other valid language settings get English; a missing setting gets Norwegian.
Using the language selector asks the site to remember your choice. We then set a first-party cookie named nouit_lang. It only contains no or en, applies on nouit.no and expires after 180 days. Choosing a different language overwrites it.
Only for internal login
Internal login uses first-party cookies prefixed with nouit-admin, sometimes with a Secure prefix. They track the login session and the short second-factor challenge. They are HttpOnly, limited to one hostname and not used for marketing. Secure is set on HTTPS. The demonstration subdomain does not receive the administrator cookie.
A second-factor challenge lasts at most 10 minutes and an email code at most 5 minutes. After one hour of inactivity, a new sign-in is required. The application also refuses administrator access after 8 hours without a new verified login, even if a session otherwise remains active. Ordinary visitors do not need to log in to read the main website. Sign out to end administrator access.
Optional attribution and marketing measurement
A tagged link may contain UTM parameters or click IDs from Google or Meta. During the active visit, Nouit can use those values to attach an enquiry to the correct source. Without consent, no persistent attribution cookie is set.
If you allow optional measurement, Nouit may keep attribution in a first-party cookie for up to 30 days across nouit.no and demo.nouit.no. If Google Analytics or Google Ads is configured, Google tagging is loaded only after this consent. You can change the choice on this page at any time.
When optional measurement is allowed, Nouit may record a pseudonymous visitor and session ID, the page visited, country, browser/device and timestamps. Detailed sessions are deleted after no more than 30 days. Raw IP addresses are not stored; the IP is used only to create a one-way HMAC fingerprint for filtering internal traffic.
Google Analytics and Google Ads tags are not loaded until you allow optional measurement. Your consent choice is passed to Google through Consent Mode v2 for analytics_storage, ad_storage, ad_user_data and ad_personalization.
Your choice: Not chosen yet
You can clear your choice
Use the button below to clear your saved language preference. Your next visit to / will use your browser language again. You can also delete the cookie in your browser. The pages work without it.