In short
- This policy covers all of nomadicmart.com: the homepage, every destination page and every application form, whether you order a visa, an ETA, an arrival card or another document.
- Only strictly necessary cookies run without your consent. They keep the site secure, take payments safely and save your progress in an application form while you fill it out.
- Preference, analytics and advertising cookies stay off until you switch them on.
- With your consent, we use Google Analytics and Microsoft Clarity to see how our site is used, and Google Ads, Meta, TikTok and Microsoft Advertising to measure our ads. Each one runs only if we've switched it on and you've said yes.
- Accept, reject or choose by category in our cookie banner, and change your mind any time with Cookie settings at the bottom of every page.
- We also count form steps and visa checks as anonymous daily totals on our own server. That uses no cookies and stores nothing on your device.
- We honor Global Privacy Control. You can also block cookies in your browser and opt out of personalized ads.
1. About this policy
This Cookie Policy explains how Nomadic Mart uses cookies and similar technologies on nomadicmart.com. It covers what each one does, which ones run without asking you, and how you stay in control.
It applies across our whole site: the homepage and visa checker, our destination pages, and the application form and checkout for every document we offer. The same cookies and the same choices apply whichever destination you're traveling to.
It sits alongside our Privacy Policy, which explains how we handle your personal data, including your rights. Our Terms & Conditions cover the use of our website and service.
Nomadic Mart is a private, independent online service. For many destinations, we prepare, check and submit applications for the travel documents a trip needs: eVisas and other visas, travel authorizations such as ETAs, visa-on-arrival pre-approvals, and arrival cards and declarations. We are not a government agency. "We", "us" and "our" mean Nomadic Mart. "You" means anyone who visits our website.
Nomadic Mart is a trading name of THE CLOUDOPS LTD (company no. 17112198, England and Wales; registered office Work.Life Manchester, Core 30, Brown Street, Manchester M2 1DH).
We follow the cookie rules in the UK Privacy and Electronic Communications Regulations (PECR), the EU ePrivacy Directive and the UK and EU General Data Protection Regulation (GDPR). In plain terms: we only use optional cookies after you say yes, and saying no is just as easy.
4. Strictly necessary cookies
These keep the site secure and make the service you asked for work. The law lets us use them without asking, because the site can't work properly without them. They aren't used for advertising.
Cookies
| Name | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
__cf_bm | Cloudflare | Tells people from bots, to protect the site from automated attacks. Its contents are encrypted. | 30 minutes | First party |
cf_clearance | Cloudflare | Remembers that you passed a security check. Set only if a check is shown to you. | 30 minutes (Cloudflare's default) | First party |
_cfuvid | Cloudflare | Tells apart visitors who share an IP address, so rate limits only apply to the right one. Set only if this protection is in use. | Session | First party |
__stripe_mid | Stripe | Fraud prevention: helps Stripe judge the risk of a payment. Set on the payment step only. | 1 year | First party |
__stripe_sid | Stripe | Fraud prevention for your current payment session. Set on the payment step only. | 30 minutes | First party |
m | Stripe (m.stripe.com) | Fraud detection: helps Stripe judge the risk of a payment. | 2 years | Third party |
nm_consent | Nomadic Mart | Remembers your cookie choices, so we don't ask on every page. Holds a random ID, your choices and the date, nothing about who you are. | 6 months | First party |
nm_admin_token | Nomadic Mart | Keeps a staff member signed in to our admin area. Staff only; can't be read by page scripts. | 12 hours | First party |
nm_admin_csrf | Nomadic Mart | Protects the staff admin area against forged requests. Staff only. | 12 hours | First party |
When you pay on Stripe's own hosted checkout page (checkout.stripe.com) instead of the payment form on our site, Stripe sets its fraud-prevention cookies on its own domain. To protect payments, Stripe's script may also run a security check (hCaptcha) and read device signals, such as how the page is used. Stripe says it uses this data only for fraud prevention and security, never for advertising.
Browser storage
| Name | Where | Purpose | Duration | Type |
|---|---|---|---|---|
nm-kh-evisa-v1, nm-kh-earrival-v1 (one key per application form) | Session storage | Keeps your progress in an application form, for any destination, so a refresh doesn't wipe your answers. Never holds your uploaded files. | Until you close the tab or place your order | First party |
nm.passport | Session storage | Remembers the passport you picked while you browse in this tab, so the visa checker and the destinations we suggest match it. | Until you close the tab | First party |
__nm_chunk_reload_ts | Session storage | After we update the site, reloads the page once to fetch the new version, and stops it reloading again and again. | Until you close the tab | First party |
Error monitoring
We use GlitchTip (self-hosted, using the Sentry SDK) to find and fix errors. It sets no cookies. When something breaks, it sends us technical details such as the page, your browser type and the error message, plus timing data for a sample of page loads. We remove cookies, form contents and fields such as names, emails and passport details before anything is sent.
5. Preference cookies
Preference cookies (sometimes called functional cookies) remember choices you've made, so you don't have to make them again. They're optional and off until you allow Preferences in Cookie settings.
| Name | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
nm_passport | Nomadic Mart | Remembers the passport you picked, so our destination pages and forms can pre-fill it next time. | 1 year. With Preferences off: session storage, until you close the tab | First party |
preferred-language | Nomadic Mart | Remembers the language to show the site in. | 1 year. With Preferences off: not stored | First party |
nm.r (local storage) | Nomadic Mart | Remembers your last search in the visa checker on our homepage: passport and destination. | Until you clear it. With Preferences off: session storage, until you close the tab | First party |
If you leave them off, nothing breaks. While you browse, we keep the passport you picked and your last visa check in this tab's session storage only, which your browser clears when you close the tab, so you don't have to pick them again on the next page. We don't store your language at all. Next time, we suggest a passport country from your approximate location instead. Our security provider, Cloudflare, works this out from your IP address on each visit, without a cookie. The site then uses your browser's language setting.
If you switch Preferences off after allowing it, we delete these cookies and move what they held into session storage for the rest of your visit.
6. Analytics cookies
Analytics shows us how people use our site: which pages they visit, where they get stuck and how fast pages load. We look at totals and trends, not at individuals.
We use the tools below only if we've switched them on and you allow Analytics in Cookie settings. Until then they don't load.
| Name | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
_ga | Google Analytics | Tells one visitor from another, so we can count visitors. | 2 years | First party |
_ga_<ID> | Google Analytics | Keeps track of your current visit (session). | 2 years | First party |
_clck | Microsoft Clarity | Keeps Clarity's random ID for you on our site, so your visits can be counted together. | 1 year | First party |
_clsk | Microsoft Clarity | Joins the pages of one visit into one session replay. | 1 day | First party |
CLID | Microsoft Clarity (clarity.ms) | Records when Clarity first saw your browser, on any site that uses Clarity. | Not published by Microsoft | Third party |
MUID | Microsoft (clarity.ms, bing.com) | Identifies your browser across Microsoft sites, for advertising, analytics and security. Only if you also allow Advertising. | 13 months | Third party |
ANONCHK, MR, SM | Microsoft Clarity (clarity.ms) | Help Clarity manage MUID: whether to refresh it, keep it in step across Microsoft's sites, and whether to pass it to Microsoft's advertising (Clarity sets this to no). Only if you also allow Advertising. | Not published by Microsoft | Third party |
| None (no cookies) | Cloudflare Web Analytics | Counts page views and measures how fast pages load. Cloudflare says it uses no cookies or local storage and doesn't fingerprint visitors. | No storage | Third party (script) |
We use Google Analytics 4. Google says it doesn't log or store IP addresses. If we link Google Analytics to Google Ads, we may also use its advertising features: remarketing audiences, and reports on demographics and interests. These combine Google's analytics and advertising cookies, so they run only if you allow both Analytics and Advertising. You can also opt out of Google Analytics on every website with Google's Google Analytics opt-out browser add-on.
We use Microsoft Clarity to see, through heatmaps and session replays, how visitors scroll, click and move through our pages, so we can fix what's confusing. Everything you type into a form is masked in your browser and never sent to Microsoft, and we set Clarity to mask the other text on our pages as well. Clarity also keeps a tab ID ({code("_cltk")}) in session storage. Microsoft collects this data with cookies and similar technologies and uses it to provide and improve Clarity and Microsoft Advertising, under the Microsoft Privacy Statement. We pass your Advertising choice to Clarity too, so its advertising cookies are used only if you also allow Advertising.
Anonymous counts, without cookies
Separately from these tools, our own server counts how many times each step of our application forms is reached, and which visa checks are made (which passport and destination, the answer, and words the checker couldn't match, such as a misspelt country). These counts use no cookies or other storage on your device. They keep no IP address and no ID, only totals per day, so they can't be linked to you, and they run whatever you choose here. Our Privacy Policy explains them.
7. Advertising cookies, pixels and conversion tools
Advertising tools help us see whether our ads work, and show our ads to people who have visited our site. They run only if we've switched them on and you allow Advertising in Cookie settings. If your browser sends Global Privacy Control, they stay off.
What these tools do
- Conversion tracking: when you click one of our ads and later place an order, the ad platform counts it. This tells us which ads are worth paying for.
- Remarketing: third-party vendors, including Google, Meta, TikTok and Microsoft, use cookies to show you our ads on other websites, based on your past visits to our website.
- No ads on our own pages: we don't show other companies' ads on our site.
| Name | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
_gcl_au | Google Ads | Links ad clicks to orders (conversion tracking). | 90 days | First party |
_gcl_aw, _gcl_gs | Google Ads | Stores details of the Google ad you clicked. | 90 days | First party |
IDE | Google (doubleclick.net) | Shows and measures Google ads on other websites, including remarketing. | 13 months in the EEA, UK and Switzerland; 24 months elsewhere | Third party |
_fbp | Meta Pixel | Identifies your browser, to measure our ads and show them to you. | 90 days | First party |
_fbc | Meta Pixel | Stores the Facebook or Instagram ad you clicked to reach us. | 90 days | First party |
fr | Meta (facebook.com) | Delivers, measures and improves ads on Meta. | 90 days | Third party |
_ttp | TikTok Pixel | Identifies your browser, to measure our TikTok ads and show them to you. | 13 months | First party, and third party on tiktok.com |
ttcsid, ttcsid_<ID> | TikTok Pixel | Keeps track of your visit, to measure our TikTok ads. | 13 months | First party |
ttclid | TikTok Pixel | Stores the TikTok ad you clicked to reach us. | 13 months | First party |
_uetsid | Microsoft Advertising (UET) | Recognizes your current visit, for conversion tracking. | 1 day | First party |
_uetvid | Microsoft Advertising (UET) | Recognizes returning visitors, for conversion tracking and remarketing. | 13 months | First party |
_uetmsclkid | Microsoft Advertising (UET) | Stores the Microsoft ad you clicked to reach us. | 90 days | First party |
MUID | Microsoft (bing.com) | Identifies your browser across Microsoft services, for advertising. | 13 months | Third party |
Cookie names and durations come from each provider's published information: how Google uses cookies, Google Analytics cookie usage, Microsoft Clarity cookies, Microsoft Advertising UET, Meta's cookie policy and TikTok Pixel cookies. Providers can change them, and we'll keep this list up to date.
We may use Google Ads for conversion tracking and remarketing. To learn how Google uses data from websites like ours, read Google's page How Google uses information from sites or apps that use our services. You can opt out of personalized advertising in Google's Ads Settings, or opt out of other vendors' personalized ads at aboutads.info.
Meta (Facebook and Instagram)
We may use the Meta Pixel and the Meta Conversions API. Third parties, including Meta, may use cookies, web beacons and other storage technologies to collect or receive information from our website and elsewhere on the internet. They use it to measure ads and to target ads. You can opt out of ads based on this information in your Meta ad preferences, or through aboutads.info and youronlinechoices.eu.
TikTok
We may use the TikTok Pixel and the TikTok Events API to measure our ads on TikTok and show them to people who have visited our site. TikTok and we are joint controllers for collecting this information on our site and sending it to TikTok. TikTok then uses it under the TikTok Privacy Policy. TikTok doesn't offer its own web opt-out, so you can use Cookie settings, aboutads.info or youronlinechoices.eu.
Microsoft Advertising
We may use Microsoft's Universal Event Tracking (UET) tag. It lets us and Microsoft see what visitors do on our site after clicking one of our ads on Bing or Microsoft's partner sites, and show our ads to past visitors. Microsoft handles this data under the Microsoft Privacy Statement. You can opt out of personalized ads from Microsoft on its ad settings page.
Server-side tools and hashed contact details
Some tools send information from our server rather than from a cookie on your device. We use them only if you've allowed Advertising:
- Google Enhanced Conversions: when you order, we may send Google a hashed version of your email address or phone number, so Google can match the order to an ad click.
- Meta Conversions API: our server may tell Meta about events such as a completed order, with hashed contact details and the
_fbpand_fbcvalues. - TikTok Events API: our server may tell TikTok about events such as a completed order, with hashed contact details and the TikTok cookie values.
- Microsoft conversion uploads: the same idea for Microsoft Advertising.
- Google Customer Match: we may upload hashed email addresses of customers to Google. Google then uses them to show those customers relevant ads, or to stop showing them ads for something they've already bought. Only for customers who agreed, and you can ask us to remove you at any time.
We never send ad platforms or analytics tools your name, your passport details, your application answers or any health or customs declaration answers. We don't use advertising tools to target children: our services are for adults. Our Privacy Policy explains our legal basis for this and how to exercise your rights.
9. Google Consent Mode v2
If we use Google's tools, we'll use Google Consent Mode v2. It passes your banner choice to Google's tags as these signals:
| Signal | What it controls | Before you choose | Follows your choice for |
|---|---|---|---|
analytics_storage | Analytics cookies, such as _ga | ✗ Denied | Analytics |
ad_storage | Advertising cookies, such as _gcl_au | ✗ Denied | Advertising |
ad_user_data | Sending personal data to Google for advertising, such as Enhanced Conversions | ✗ Denied | Advertising |
ad_personalization | Using data for personalized ads, such as remarketing | ✗ Denied | Advertising |
functionality_storage | Cookies that remember your settings, such as your language | ✗ Denied | Preferences |
personalization_storage | Cookies that personalize what you see on our site | ✗ Denied | Preferences |
security_storage | Security cookies, such as fraud and bot protection | ✓ Granted | Always on (strictly necessary) |
All of them except security start as "denied" for every visitor, wherever you are, before any other script on our pages runs. A signal changes to "granted" only when you accept the matching category. While a signal is denied, Google's tags don't set or read cookies for that purpose.
We load Google's tags only after you accept, so nothing reaches Google before you choose. We do the same for other providers: Microsoft's UET tag and Microsoft Clarity get your choice through their own consent settings, and the Meta and TikTok pixels don't load until you accept Advertising.
10. Controlling cookies in your browser
Most browsers let you see, delete and block cookies, and many block third-party cookies by default. Here's how to do it in the main browsers:
- Manage cookies in Google Chrome
- Manage cookies in Safari on Mac and clear cookies in Safari on iPhone and iPad
- Clear cookies and site data in Firefox
- Manage cookies in Microsoft Edge
To clear local and session storage, use your browser's "clear site data" or "clear browsing data" option.
11. Opting out of personalized ads
As well as using Cookie settings, you can opt out directly with ad companies and industry schemes:
- Google: Ads Settings, and how Google uses information from sites or apps that use its services
- Meta (Facebook and Instagram): ad preferences
- Microsoft: personalized ad settings
- Digital Advertising Alliance (US): aboutads.info WebChoices
- European Interactive Digital Advertising Alliance (EU and UK): youronlinechoices.eu
- Network Advertising Initiative: networkadvertising.org opt-out
These opt-outs usually work by saving an opt-out cookie, so they apply to one browser at a time and are lost if you clear your cookies. Opting out doesn't stop ads. It stops those companies personalizing ads based on your browsing, so you may still see our ads, just not because you visited us.
12. Global Privacy Control and Do Not Track
Global Privacy Control (GPC)
Global Privacy Control is a setting in some browsers and extensions. It tells websites you don't want your personal information sold or shared. We honor it automatically. When your browser sends GPC, we treat it as "Reject" for advertising cookies and server-side ad tools in that browser, and our cookie banner and Cookie settings show that we've honored it. You don't need to do anything else.
If you live in California or another US state with a privacy law
California and some other US states treat using advertising cookies to show you ads based on your activity across websites ("cross-context behavioral advertising") as "sharing" personal information. We don't sell personal information for money.
Advertising is off until you switch it on. To opt out of sharing after allowing it, switch off Advertising in Cookie settings, which works as our "Do Not Sell or Share My Personal Information" choice, or turn on GPC. Our Privacy Policy explains your other rights.
Do Not Track (DNT)
Do Not Track is an older browser setting, with no agreed standard for how websites should respond, and most browsers no longer offer it. We don't respond to it separately: optional tools never run until you switch them on yourself in Cookie settings, and Global Privacy Control (above) is the signal we honor.
13. Changes to this policy
We'll update this policy when we add, remove or change a cookie or a provider, or when the law changes. The "Last updated" date at the top shows the current version.
Before we add a new category of cookies or a new analytics or advertising provider, we'll update this page and ask for your consent again through the banner.
14. Contact us
Questions about cookies? Email [email protected] or message us on WhatsApp. A real person will reply.
For your data protection rights, including how to complain to the UK Information Commissioner's Office (ICO) or your local data protection authority, see our Privacy Policy.
Nomadic Mart is a trading name of THE CLOUDOPS LTD (company no. 17112198, England and Wales; registered office Work.Life Manchester, Core 30, Brown Street, Manchester M2 1DH).