Cookie Policy
Last updated: September 25, 2026. Your browser controls can clear site data, but doing so may sign you out or remove local preferences.
Your choices
Two separate consents are collected on this site, by two different parties. Each is changed in its own place, and changing one does not change the other.
Analytics
Google Analytics 4 and the Google Consent Mode signals described below. This is what the two buttons below set, and you can change the answer at any time.
No choice saved yet. In the EU, EEA, UK and Switzerland nothing non-essential runs until you accept; everywhere else analytics is on by default and the button below turns it off.
Advertising
Advertising consent is collected by Mediavine's own consent manager, which appears only for visitors in regions where it is required. The control below reopens it.
Checking whether Mediavine's consent manager is running for this visit…
Checking your current choice…
Authentication
Secure HttpOnly SameSite cookies maintain a signed-in or short-lived recovery session. They do not contain passwords or recovery codes.
Security
Rate limiting, CSRF/origin validation, passkey challenges, and trusted-session protections may use short-lived server or browser state.
Preferences
Theme and your cookie-consent choice are stored in browser localStorage (the theme and cookie-consent keys); workspace layout and guest session choices may also be stored locally.
Analytics
This is what the analytics control under Your choices governs. Google Analytics 4 measures aggregate usage through this site's property and the Novus network roll-up, and one consent-gated Google tag configures both destinations. That choice also sets Google's Consent Mode v2 advertising signals (ad_storage, ad_user_data, ad_personalization). All of these default to denied in the EEA, UK, and Switzerland until you accept, are on by default elsewhere with the control above to turn them off, your saved choice is reapplied on return visits, and Global Privacy Control overrides a saved grant. Withdrawing analytics consent immediately denies both destinations, expires applicable Google measurement cookies, and reloads once when the tag has already run. First-party Vercel Web Analytics and Speed Insights measure page and interaction performance without advertising cookies.
Advertising
Programmatic advertising is served by Mediavine (Journey). Mediavine and its demand partners may set cookies or use device storage to show and measure ads. Advertising consent is governed by Mediavine's own consent management platform, which appears for visitors in regions where that is required; where it is running you can reopen it from Manage advertising consent under Your choices above. The analytics control covers analytics, not advertising, and choosing Essential only does not by itself stop the Mediavine script from loading. That script is included in the page for every route, including this one and the privacy policy, so Mediavine's own consent prompt and its crawler can reach every page. This site's Content-Security-Policy refuses it outright on the signed-in and editing areas (Classic, Studio, dashboard, settings, admin, sign-in, sign-up, account recovery, notifications, and community publishing), so it cannot run there at all. Novus places no ad slots of its own on Classic, Studio, account, admin, legal, security, or accessibility routes, and exports do not open sponsor tabs. One first-party cookie, nss_ads_optout, is written only if you open a Novus page with ?nss_ads=off. It stores a single flag recording that no ad should be requested for this browser, is scoped to novusstreamsolutions.com so one visit covers every Novus site, expires after two years, contains no identifier, and is removed by ?nss_ads=on. It is the gate any first-party Novus ad request has to pass, and this site currently makes none, because every ad here is Mediavine's, so today the flag changes nothing you see and has no effect on the Mediavine script. The public /ads.txt endpoint redirects to Mediavine's hosted seller list.
Project data
Signed-in projects are stored in Turso, not cookies. Private assets use Vercel Blob. Guest work is stored device-locally in your browser using IndexedDB and can be exported as .novusvis; clearing site data removes it.