Cookies & browser storage

Last updated: 5 November 2026

We only store what is needed for the website and the app to work and to remember your settings — with one exception you decide on: on ngcrm.ai and ngcrm.net we ask whether you allow the Meta Pixel and the Google Ads tag (see below). Without your consent neither is loaded.

Website (ngcrm.ai)

• ngcrm_lang (cookie, 1 year) — remembers the language you chose.
• ngcrm_wa_region (browser storage) — remembers the WhatsApp sign-up region you chose.
• Plausible Analytics — cookieless; counts visits without cookies and without personal profiles.

Meta Pixel (only with your consent)

If you click “Allow” in the banner, we load the Meta Pixel (Meta Platforms Ireland Ltd.). It sets cookies such as _fbp (up to 90 days) and, when you arrive from a Meta ad, _fbc, and sends Meta the page you visit and when you click to sign up or to start a WhatsApp chat. We use this to measure and improve our ads on Facebook and Instagram. Meta and we are joint controllers for this collection; Meta processes the data under its own privacy policy. If you click “Decline”, nothing is loaded. Our ads on Facebook and Instagram and the Meta Pixel are currently managed through the Meta business account of our group company Megatrend Redok d.o.o., Velika cesta 47, 10000 Zagreb, Croatia.

Your choice is stored in your browser (ngcrm_ads_consent). You can change it at any time: Change my choice

Google Ads tag (only with your consent)

If you click “Allow” in the banner, we also load the Google Ads tag (gtag.js, Google Ireland Limited). It sets cookies such as _gcl_au (up to 90 days) and, when you arrive from a Google ad, _gcl_aw (up to 90 days); Google may also use cookies on its own domains. It tells Google when you click to sign up or to start a WhatsApp chat, so that we can measure which Google ads lead to sign-ups. Google processes the data under its own privacy policy. If you click “Decline”, it is not loaded. Our Google Ads account is currently managed by our group company Megatrend Redok d.o.o., Velika cesta 47, 10000 Zagreb, Croatia.

Sign-in (eu.ngcrm.ai, br.ngcrm.ai)

Set by our sign-in service; all are strictly necessary:

• AUTH_SESSION_ID, KC_AUTH_SESSION_HASH, KC_RESTART — keep the sign-in flow working (session).
• KEYCLOAK_IDENTITY, KEYCLOAK_SESSION — keep you signed in (session; ends after inactivity or at the latest after 10 hours).
• KEYCLOAK_LOCALE — remembers your language on the sign-in page.

App and customer portal

The app itself sets no cookies. It uses browser storage for your settings and for working state — for example language, theme, sidebar, selected organization and board layout — and session storage for short-lived steps such as verification and activation.

Payment

On the payment page, our payment provider Paddle may set its own cookies needed for checkout. dLocal payments open on dLocal’s own page under its policies.

Fonts

Fonts are served from our own servers; no third party receives your IP address when they load.

See also our Privacy Policy and Sub-processors.