01Summary
- Nodaform uses only one strictly necessary cookie: the session cookie created when you sign in. Your preferences and a temporary copy of your projects are kept in your browser's local storage (localStorage).
- No cookies or tools are used for analytics, advertising or tracking purposes.
- Fonts are loaded from Google Fonts; in the process, your IP address is transmitted to Google.
- You may delete the entries in your browser at any time. Your projects are not lost, as they are stored in your account; only the most recent changes made while offline and not yet transmitted may be lost.
02What are cookies and local storage?
A cookie is a small text file that a website you visit stores in your browser and that is sent back to the server with subsequent requests.
Local storage (localStorage) is a similar technology that allows a website to store data in your browser. Unlike cookies, the data is not sent to the server with every request and remains on your device until you delete it. Session storage (sessionStorage) works in the same way, but is deleted when the browser tab is closed.
In this policy, the term “entry” covers all of these technologies. Entries can be read only by nodaform.com; other websites cannot access them.
03Categories we use
| Category | Description |
|---|---|
| Strictly necessary | Required for the Service to function: session, account, projects and functions you have expressly requested (sharing, support, drawing sheets). Without these entries, the editor and account functions do not work. |
| Functional | Remembers choices you make, such as language, region and display. If deleted, the Service continues to function; only your choices revert to their defaults. |
| Analytics / marketing | Not used. Should such entries be used in the future, they will be activated only after your explicit consent has been obtained, and this policy will be updated. |
04Entries kept in your browser
The list below contains all entries the site may create in your browser. An entry is created only when you use the relevant function; for example, if you have never saved a sheet template, the qwall.sheets.v1 entry will not exist.
| Switch | What it stores | Category | Duration |
|---|---|---|---|
| Cookie | |||
nf_sess | Session cookie: a random key that informs the server that you are signed in; on its own, it contains no personal information. It cannot be read by scripts on the page (HttpOnly), is sent only over secure connections (Secure) and is not attached to requests originating from other sites (SameSite). | Strictly necessary | 30 days, extended as you use the site; deleted when you sign out |
nf_admin | Site administrators only: admin panel session. Sent only to administration addresses; cannot be read by scripts on the page. | Strictly necessary | 12 hours; deleted when you sign out |
| Account and session | |||
qwall.session.v1 | A copy of non-sensitive information about the signed-in user, such as name, email address, plan and subscription period, so that pages load quickly. The actual session is held in the cookie and is verified with the server each time the site is opened. | Strictly necessary | Until you sign out |
qwall.tier | A backup of the plan information; determines which tools are available when no account is present (during the testing phase it can also be set from the address bar). | Strictly necessary | Persistent — until you delete it |
| Projects and content | |||
qwall.plan.v1 | A temporary copy of the plan currently open in the editor. | Strictly necessary | Until you sign out |
qwall.projects.v1 | A temporary copy of your projects for fast loading (plan data, name, date). The primary record is stored in your account. | Strictly necessary | Until you sign out |
qwall.projects.owner | Records which account the temporary copies belong to; if a different account signs in on the same browser, the copies are deleted. | Strictly necessary | Until you sign out |
qwall.sync.dirty.v1 | A list of changes made while offline that have not yet been sent to your account. | Strictly necessary | Deleted once sent or when you sign out |
qwall.sheets.v1 | Your drawing sheet templates: paper size, scale, title block rows, company name and the logo you uploaded. | Strictly necessary | Persistent — until you delete it |
qwall.newplan | Passes the new plan settings you selected on the My account page to the editor. | Strictly necessary | Temporary — deleted when the editor opens |
qwall.guest | sessionStorage: the guest session for a plan opened via a share link. | Strictly necessary | Until the tab is closed |
| Preferences | |||
qwall.lang | The interface language you selected. | Functional | Persistent — until you delete it |
qwall.region | Your choice of region and currency for displaying prices. | Functional | Persistent — until you delete it |
qwall.billing | Your choice of monthly or yearly view on the pricing page. | Functional | Persistent — until you delete it |
qwall.tour | Records whether you have completed or skipped the editor introduction tour. | Functional | Persistent — until you delete it |
qwall.flow | The tab you selected on the “How It Works” page. | Functional | Persistent — until you delete it |
qwall.announce.dismissed | The site announcement you dismissed, so that the same announcement is not shown again. | Functional | Persistent — until you delete it |
| Site settings (cache) | |||
qwall.announce | The last known copy of the site-wide announcement text, so that the page loads quickly (contains no personal data). | Strictly necessary | Persistent — until you delete it |
qwall.pricing.v1 | The last known copy of the regional price table, so that prices are displayed quickly (contains no personal data). | Strictly necessary | Persistent — until you delete it |
The “qwall” prefix in the key names is the product’s internal code name. Share links, comments and support tickets are not stored in the browser; they are stored on the server together with your account.
05Third-party services
| Service | When and what is transferred |
|---|---|
| Google Fonts fonts.googleapis.com, fonts.gstatic.com | On every page, your browser connects to Google’s servers to load the fonts (Archivo, IBM Plex Mono); your IP address, browser information and the address of the visited page are transmitted to Google. Google Fonts does not set cookies. |
| Sign in with Google accounts.google.com | Loaded only on the sign-in screen and only when Sign in with Google is enabled. Google may use session cookies on its own domain. These cookies are subject to Google’s privacy policy. |
| 3D library (three.js) esm.sh | Only when you open the 3D view is the three-dimensional rendering library downloaded from the esm.sh content delivery network; in doing so, your IP address and browser information are transmitted to that provider. No cookies are set. |
Once the payment page is put into service, the payment institution [PAYMENT INSTITUTION] may use cookies on its own page for security and fraud prevention purposes; these cookies are subject to the payment institution’s policy.
06Legal basis and consent
Strictly necessary records are required for the performance of the contract we have concluded with you and for the provision of the service you have expressly requested (KVKK (Turkish Personal Data Protection Law) Art. 5/2-c). Functional records are created solely to remember a choice you have made and are based on our legitimate interest (KVKK Art. 5/2-f). Accordingly, in line with the Personal Data Protection Authority’s Guide on Cookie Practices and the “strictly necessary” and “requested by the user” exemptions under the EU ePrivacy rules, separate consent is not requested for these records.
Should records for analytics, advertising or personalisation purposes be introduced, they will be activated only after your explicit consent has been obtained, and you may withdraw your consent at any time.
07How can you delete these records?
Your account and projects are stored on our servers; clearing site data does not delete them. Only the session and cache records in this browser are removed, so you will need to sign in again. Recent changes that have not yet been saved to the server may be lost; before clearing, make sure your open project has been saved.
Deleting Nodaform data only
- Chrome / Edge: click the site icon in the address bar › Site settings (Permissions for this site in Edge) › Delete data.
- Firefox: the lock icon in the address bar › Clear cookies and site data.
- Safari (macOS): Safari › Settings › Privacy › Manage Website Data › nodaform.com › Remove.
- Mobile browsers: delete the nodaform.com entry under Site settings or Website data in your browser settings.
Menu names may vary depending on the browser version.
Deleting individual records
In desktop browsers, you can open the developer tools with F12 and delete records individually under Local Storage › https://nodaform.com in the Application tab (Storage in Firefox). For example, deleting only the qwall.lang record resets your language choice without affecting your projects.
Deleting from your account
The Delete account action under My account › Settings permanently deletes your account and projects from our servers and removes the session record from this browser. Signing out only ends your session.
Blocking third-party requests
You can block Google Fonts requests using browser extensions; in that case, the site is displayed with fallback fonts on your system and continues to work.
08Changes and contact
When the records used on the site change, this policy is updated and the date at the top of the page is revised. You may send any questions to info@nodaform.com. Detailed information on the processing of your personal data is provided in the KVKK Privacy Notice.