Cookies
The NOJ site sets no cookies. The contact, suggestion and newsletter forms do not use a session or CSRF cookie. The site has no advertising pixels and no third-party marketing trackers.
An active site-alert banner may use your browser’s session storage to remember that you dismissed it until that browser tab/session ends. Session storage is not a cookie and is not sent to NOJ.
Plausible Analytics
Production deployments use Plausible Analytics only when the site-specific tracker is explicitly configured; analytics is off in unconfigured builds. Plausible is cookieless and we do not enable its automatic form, outbound-link or file-download capture.
NOJ sends only aggregate pageviews and a short fixed list of events: tool start, tool completion, guide view, citation exit, video play and contact attempt. Query strings are removed from every event URL. Event properties are closed enums such as the public tool name or whether a contact attempt used direct delivery or mailto. Names, email addresses, messages, search text, letter contents, plan contents, checklist answers and arbitrary properties are prohibited in code.
Video
YouTube is not contacted until you choose to play a video. Videos use YouTube’s privacy-enhanced
youtube-nocookie.com embed. After you choose to load a video, YouTube may process technical data
under its own privacy terms.
The machine-readable configuration is at cookie-manifest.json.