Cookie Policy
Last updated: October 06, 2026
This Cookie Policy explains how Noldus Information Technology BV ("Noldus", "we", "us", or "our") uses cookies and similar tracking technologies on our website noldus.com (the "Website").
1. What Are Cookies?
Cookies are small text files stored on your device (computer, tablet, or mobile) when you visit a website. They help websites remember your preferences, improve functionality, and analyze usage patterns.
Cookies can be "session cookies" (deleted when you close your browser) or "persistent cookies" (remain on your device for a set period or until manually deleted).
We also use similar technologies such as your browser's local storage. Where this policy refers to "cookies", it also covers these similar technologies unless stated otherwise.
2. Our Privacy-First Approach
We respect your privacy. Our website uses a two-tier approach:
- Without Consent: Privacy-friendly, cookieless analytics with anonymized data (no cookies and no third-party scripts are placed in your browser)
- With Consent: Additional analytics and marketing tools that may set cookies and load third-party scripts for deeper insights and personalized support
You are always in control. You can accept, reject, or customize your cookie preferences at any time.
3. Cookies We Use
3.1 Essential Cookies (Always Active)
These cookies are necessary for the website to function properly. They cannot be disabled.
| Name | Purpose | Duration |
|---|---|---|
| noldus_cookie_consent | Stores your analytics cookie consent choice | 1 year |
| noldus_marketing_consent | Stores your marketing & sales cookie consent choice | 1 year |
| XSRF-TOKEN | Security token to prevent cross-site request forgery | Session |
| laravel_session | Maintains your session state | Session |
| noldus_cart_session | Preserves your shopping cart across sessions | 30 days |
| hs_tracking_consent | Records that you submitted a form and consented to website personalization | 180 days |
3.2 Analytics Cookies (Requires Consent)
By default, our analytics are collected server-side and do not place any cookies or scripts in your browser (see Section 4). If you consent to analytics cookies, we additionally load the Matomo JavaScript tracker from our self-hosted instance (analytics.noldus.com) to enable features such as heatmaps and session recording. In that case, Matomo may set the following first-party cookies in your browser:
| Cookie Name | Purpose | Duration |
|---|---|---|
| _pk_id.* | Matomo — stores a pseudonymous visitor identifier for analytics | 13 months |
| _pk_ses.* | Matomo — temporary cookie to track the current session | 30 minutes |
If you reject analytics cookies, the Matomo JavaScript tracker is not loaded and no Matomo cookies are set. Only the cookieless server-side analytics described in Section 4 remain active.
3.3 Functional Storage (Requires Consent)
To recognize returning visitors and improve your experience, we store the following identifiers using your browser's local and session storage. These are similar technologies to cookies but are not cookies:
| Name | Storage | Purpose | Duration |
|---|---|---|---|
| noldus_visitor_id | Local storage | Pseudonymous visitor identifier used to recognize returning visitors | Until cleared |
| noldus_session_id | Session storage | Identifies the current browsing session | Until the tab is closed |
4. Server-Side Analytics (No Consent Required)
By default, our website analytics are collected server-side, without placing any cookies in your browser. This data is collected for all visitors on the basis of our legitimate interest in understanding and improving our website, and includes:
- Pages visited
- Browser type and device information (from HTTP headers)
- Approximate geographic location (from IP address, anonymized after processing)
- Referrer source (where you came from)
- Campaign parameters (UTM tags, Google Ads click IDs)
Privacy Protection: This server-side tracking does not use cookies for analytics and complies with GDPR requirements for legitimate interest. A small amount of JavaScript sends anonymized page-view information to our own servers, and identifiers are stored in your browser's local storage only after you consent (see Section 3.3). All data is stored on our self-hosted Matomo instance (analytics.noldus.com) and is never shared with third parties.
5. Why We Use Matomo Analytics
Unlike many third-party analytics services, our Matomo-based analytics solution is:
- Self-Hosted: All Matomo data stays on our servers (analytics.noldus.com)
- Privacy-Focused: Matomo data is not shared with third parties
- GDPR Compliant: Built with European privacy laws in mind
- IP Anonymization: Automatically masks IP addresses
- No Cross-Site Tracking: Matomo data is not used for advertising or profiling
6. How to Manage Your Cookie Preferences
6.1 Cookie Consent Banner
When you first visit our website, you'll see a cookie consent banner. You can:
- Accept All: Enable analytics and marketing & sales cookies for full functionality
- Reject All: Keep only essential cookies (cookieless server-side analytics remains active)
- Customize: Choose which categories (Analytics, Marketing & Sales) to enable
6.2 Change Preferences Anytime
You can update your cookie preferences at any time by clicking the "Cookie Settings" link in the footer of our website.
6.3 Browser Settings
You can also manage cookies and clear local storage through your browser settings:
- Chrome: Settings → Privacy and security → Cookies and other site data
- Firefox: Settings → Privacy & Security → Cookies and Site Data
- Safari: Preferences → Privacy → Manage Website Data
- Edge: Settings → Cookies and site permissions → Cookies and site data
Note: Blocking all cookies may affect website functionality.
7. Third-Party Services & Cookies
Our own analytics are handled by our self-hosted Matomo instance. When you accept Marketing & Sales cookies, we additionally load the following third-party services, which may set their own cookies:
- HubSpot — live chat and sales support. HubSpot may set cookies to operate the chat widget and to recognize returning contacts.
- Google Tag Manager (GTM-W4T4VKL) — a tag manager we use to load and manage our marketing and conversion tags (such as Google Ads conversion tracking). Tags loaded through Google Tag Manager may set cookies from Google.
- Google reCAPTCHA — used by the HubSpot chat widget for spam protection, which may set cookies from google.com.
These services only load after you have given explicit consent to Marketing & Sales cookies, or after you accept chat via the chat icon.
In addition, embedded content (for example YouTube videos or social media widgets) may set their own cookies when displayed. We recommend reviewing the privacy policies of those providers.
8. Data Retention
We retain analytics data for the following periods:
- Raw Analytics Data: 26 months maximum
- Aggregated Reports: Indefinitely (no personal data)
- Cookie Consent Records: 1 year
9. Your Rights
Under GDPR and other privacy laws, you have the right to:
- Access your data collected through cookies
- Request deletion of your data
- Withdraw consent at any time
- Object to processing based on legitimate interest
- Lodge a complaint with a supervisory authority
To exercise your rights, contact us at [email protected]
10. Updates to This Cookie Policy
We may update this Cookie Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.
11. Contact Us
If you have questions about our use of cookies, please contact us:
Noldus Information Technology BV
Nieuwe Kanaal 5
6709 PA Wageningen
The Netherlands
Email: [email protected]
Phone: +31 317 473 300