Cookie policy & preferences
Last reviewed: 9 November 2026
This policy lists the cookies, local storage, IndexedDB, and cache storage used by the service as shipped. It is general information, not legal advice for your own site.
What this page controls, and what it does not
The switches on this page govern both categories of non-essential technology here. Analytics is Google Analytics and Ahrefs Web Analytics. Advertising is the ads this site shows. Placed units are served by Adsterra. Every page’s HTML also includes Google’s AdSense loader (https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-3314321445308943) so Google can verify the site. Consent Mode sets the advertising signals before that loader runs. Adsterra units are requested from your browser only after the page has loaded, and only while the Advertising switch is on. Turn it off and no Adsterra unit is requested. The AdSense loader stays in the HTML either way, with advertising storage denied while the switch is off.
Where you are changes when things run
If you appear to be in the EU, the EEA, the UK or Switzerland, analytics and Adsterra advertising stay off until you choose: both start switched off, and no Adsterra ad is requested until you switch Advertising on below. The AdSense loader is still in the page HTML, and Consent Mode denies advertising storage until you switch Advertising on. Everywhere else analytics and advertising start switched on and you can switch them off in one click on this page, which is linked from the footer of every page. Nothing interrupts you on arrival, and the choice is remembered on this browser.
We work out which applies from your browser’s timezone setting. That keeps the check entirely on your device: we do not look your IP address up against a location service, and no request leaves your browser to make this decision. It is an approximation: a VPN or a manually-set timezone will change the answer, so if you would rather be treated as opt-in wherever you are, switch both categories off below and we will remember it.
If your browser sends Global Privacy Control, we treat that as switching both categories off, regardless of where you appear to be.
What we use
- Essential, first-party storage remembers your theme, consent choice, optional local drafts, selected assets, test collection, and page-feedback choice. These records stay on this device and are never used for advertising. Consent and theme are required for the chosen experience; other records are created only when you use the feature. When you install or visit the site as a Progressive Web App, the browser may also keep a small offline app-shell cache (the offline page and app icons) via the site service worker, this is ordinary browser HTTP caching, not a tracker, and it never caches downloads, ads, or analytics scripts.
- Analytics: Google Analytics 4. While this category is off it runs in Consent Mode with no cookies; while it is on, it sets standard GA cookies (such as
_gaand_ga_*) to measure usage. You can switch it off here at any time. The same switch governs Ahrefs Web Analytics, which counts page views in aggregate and sets no cookies or other storage on your device: it loads only while this category is on, and never on account, admin, or sign-in pages. - Advertising: Adsterra units in the page’s ad positions, the Google AdSense loader in every page’s head, and the Google advertising signals Consent Mode sends (
ad_storage,ad_user_data,ad_personalization). The switch below turns Adsterra units and those signals on and off. While it is on, ad units load from Adsterra’s servers into the page’s ad positions, and a download or export button may also open one sponsored page in a new tab. Adsterra units are only placed where a page offers an ad position, and legal, consent, sign-in, security, and accessibility pages offer none. The AdSense loader is on those pages too; it does not add an Adsterra placement.
There is also a separate switch, shared by the Novus sites on novusstreamsolutions.com. Opening any of them with ?nss_ads=off in the address sets the nss_ads_optout cookie listed below, and ?nss_ads=on removes it. On this site, opening a page with ?nss_ads=off sets the same cookie for testaroo.com, and while it is present no Adsterra unit is requested and no sponsored tab is opened, whatever the switches below say. The AdSense loader stays in the page HTML. A cookie set on novusstreamsolutions.com does not reach this domain, and one set here does not reach the Novus sites there, so each domain needs its own visit. Sonic Weaver, on sonicweaver.com, is outside both. We built it to exclude our own browsing and automated testing from the ad account, and it is yours to use as well. It is not a replacement for the switches below: it is not remembered per category, and clearing your cookies clears it.
Cookies & storage we may set
Essential first-party storage is available to the relevant feature; analytics entries appear only while the Analytics category is on. While the Advertising category is on, Adsterra, Google AdSense, and the advertisers whose ads they serve may set cookies under names and retention periods they control. While it is off, Adsterra is not requested and Consent Mode denies AdSense advertising storage. The AdSense loader script is still requested with the page, which sends Google the usual request data (IP address, browser user-agent, and page address).
| Name | Provider | Type | Purpose | Retention |
|---|---|---|---|---|
nx_consent | Testaroo (first-party) | Cookie + local storage | Essential: remembers your analytics/advertising consent choices | 180 days (cookie); until cleared (storage) |
nss_ads_optout | Novus Stream Solutions (first-party) | Cookie | Essential: records a decision not to request ads. It is set only when you open a page with ?nss_ads=off in the address, and cleared with ?nss_ads=on. It holds no identifier and never enables anything. While it is present this site requests no ad and opens no sponsored tab. It is scoped to the domain you set it on (testaroo.com here, or novusstreamsolutions.com for the Novus sites there) and never reaches Sonic Weaver, on sonicweaver.com. We use it ourselves so that our own browsing and testing is not counted as advertising traffic. | 2 years, or until you open a page with ?nss_ads=on |
theme | Testaroo (first-party) | Local storage | Essential: remembers your light/dark theme | Until cleared |
nx-form-studio:*, nx-form-values:*, nx-doc-studio:* | Testaroo (first-party) | Local storage | Optional local form, field-value, and document drafts | Until cleared in the workspace or browser |
nx-account-link:*, nx-prefs-updated-at, nx-prefs-synced-at, nx-prefs-checked | Testaroo (first-party) | Local storage (the last in session storage) | Only when you use an account: which saved copy in your account a draft or collection on this device updates (an item id and a revision number), and when your theme and motion choice last changed and last matched your account | Until browser data is cleared; the last until the tab closes |
novus-visual-studio | Testaroo (first-party) | IndexedDB | Optional image assets selected for a local visual draft | Until browser data is cleared |
novus-examples.collections.v1 | Testaroo (first-party) | Local storage | Versioned local test-file collection; capped at 100 files and 200 MiB | Until the collection or browser data is cleared |
novus-examples.blog-feedback.v1:*, novus-examples.content-feedback.v1:* | Testaroo (first-party) | Local storage | Remembers a yes/no helpfulness choice on an article or guide | Until browser data is cleared |
better-auth.session_token (__Secure- prefixed on this site) | Testaroo (first-party) | Cookie (httpOnly) | Essential: keeps you signed in, set only when you sign in or create an account | 7 days, or until you sign out |
nss_session_hint | Testaroo (first-party) | Cookie (readable by the page) | Essential: says only that this browser is signed in, so the page knows to show your notifications; holds no identifier, set and removed with your sign-in | Same as the sign-in, removed when you sign out |
better-auth.two_factor | Testaroo (first-party) | Cookie (httpOnly) | Essential: set only on an account with two-factor sign-in on, to hold a password sign-in open while you enter your code | 10 minutes, or until the code is entered |
better-auth.trust_device | Testaroo (first-party) | Cookie (httpOnly) | Essential: set only when you tick “Trust this browser” at the code step, so this browser skips the code (never the password) | 30 days, or until two-factor sign-in is turned off |
nss_reset_token | Testaroo (first-party) | Cookie (httpOnly, sent only to the reset page) | Essential: carries a password-reset link’s one-time token to the reset form, so the token never appears in a page address | 1 hour, or until the new password is set |
novus:chat-token | Testaroo (first-party) | localStorage | Essential: a random code created only when you open the chat on the contact page, so this browser can find its conversation again; the server keeps only a one-way hash of it | Until you clear this site’s data; the conversation itself is removed 12 months after its last message |
| Service worker app-shell cache | Testaroo (first-party) | Cache Storage | Offline navigation shell; never stores account, admin or sign-in pages, fixture downloads, ads, or analytics scripts | Until replaced by a deploy or cleared by the browser/user |
_ga | Google Analytics | Cookie | Analytics: distinguishes visitors | 2 years (set only while Analytics is enabled) |
_ga_Y8PBMQXKFY | Google Analytics | Cookie | Analytics: session state for this GA4 property | 2 years (set only while Analytics is enabled) |
| Adsterra advertising cookies | Adsterra and its advertisers (third-party) | Cookies | Advertising: show and measure ads, frequency capping | Vary by provider; set only while Advertising is enabled |
See the privacy policy for the bigger picture, and the terms of use.
Your preferences
Change what non-essential categories are allowed.
Essential
Required for the site to work (theme, consent choice). Always on.
Analytics
Google Analytics 4. Runs cookieless until allowed; sets analytics cookies (e.g. _ga) once you opt in.
Advertising
Adsterra ads on this site, and the Google advertising signals sent with Analytics (ad_storage, ad_user_data, ad_personalization). Turned off, no ad is requested.
Turn ads off
Checking your current choice…