N.Rich tag - data collection, privacy & compliance

Last updated: July 6, 2026

This article is for anyone who needs to understand what data the N.Rich tag collects, how that data is used, and what it means for your obligations under privacy law. If you're looking for installation instructions, see Getting started with the N.Rich Website Tag.

Privacy framework

The N.Rich tag is designed to support compliance with the EU General Data Protection Regulation (GDPR), the EU ePrivacy Directive, and US state privacy laws including the California Consumer Privacy Act (CCPA).

N.Rich uses consent as the primary legal basis for setting cookies and personalising advertising. Consent signals are received through the IAB Transparency and Consent Framework (TCF) and through your website's own Consent Management Platform. N.Rich is listed on the IAB vendor list with vendor ID 20 (N.Rich Technologies Inc).

Data collected through the tag is used solely for analytics and targeted advertising. Where a client lawfully imports direct contact data (such as name or business email address) into the N.Rich platform and a valid legal basis exists, N.Rich may associate that data with previously collected online identifiers for account-based marketing and analytics purposes. This association occurs solely under the client's responsibility as data controller and in accordance with applicable data protection law.

N.Rich also respects the browser "Do Not Track" (DNT) standard. When creating or updating a cookie, N.Rich sets an additional informational cookie containing a link to the N.Rich Privacy Notice and Opt-Out page, ensuring these are always available to the end user.

For more detail on N.Rich's overall approach to data privacy, see N.Rich Data Privacy Approach.

Where data is stored

The EU platform hosts user data in France and Germany. The US platform hosts user data in Canada and the United States. For full details, see Data storage: GDPR, CCPA and other relevant US state privacy law compliance.

What data the tag collects

The N.Rich tag collects data across five categories. What is collected depends on whether the tag is running in Cookieless or Standard mode.

1. Unique browser identifier (cookie) A cookie that uniquely identifies the visitor's browser. This is only created in Standard mode - in Cookieless mode, the tag will read an existing cookie if one is already present, but will not create one.

2. Account association N.Rich associates the visitor with a company (account) based on their IP address and available cookie data. In Cookieless mode, visitors cannot be uniquely identified - all data is attributed at account level only.

3. Website behaviour

  • Referring URL including all parameters

  • Visited URL including all parameters

  • UTM tags and other URL parameters

  • Page scroll depth

  • Timestamps for the start and end of a page visit and session (session data is only available in Standard mode)

  • Custom in-page event data, such as clicks or video views (requires custom setup)

  • Custom page categorisation defined by the N.Rich customer

4. Software and hardware environment

  • Relevant HTTP headers

  • IP address

  • Geo-location (derived from IP address)

  • User agent (browser type)

  • Timezone, language, country

  • Browser and screen dimensions

  • Do Not Track (DNT) header

5. User preferences

  • Processing of the IAB TC String to determine whether valid consent has previously been given

Third-party tags loaded by N.Rich

When the tag is running in Standard mode, N.Rich may also load the Google Analytics Tag and Facebook pixel through its advertising partners (Google, Meta, and Continuity), where necessary for campaign delivery and measurement.

N.Rich cookies reference

Name

Host

Purpose

Lifetime

_nauid

.nrich.ai

Unique identifier of the visitor's browser. Used for analytics and optimisation of targeted advertising.

540 days

N.RICH_PRIVACY_INFORMATION

.nrich.ai

Informational cookie containing a link to the N.Rich Privacy Notice and Opt-Out page.

540 days

_ncsrc

.nrich.ai

Stores the name of the data controller in encrypted format.

540 days

nrichopt-out

.nrich.ai

Set if the user has opted out. Only this cookie is retained after opt-out.

Perpetual

donot_sell

.nrich.ai

Set if the user has opted out from data selling under CCPA.

Perpetual

The 540-day expiry is refreshed every time the N.Rich Standard tag loads for a given cookie.

How to describe N.Rich in your privacy or cookie notice

As part of valid cookie consent, you should inform your website visitors about how N.Rich processes their personal data. Your cookie banner or privacy notice should include links to the N.Rich Privacy Notice, Privacy Centre, and Opt-Out page.

Below are three ready-to-use examples. Choose the one that best fits your existing notice format.

Option 1 - Partner-style disclosure

We work with our partners to provide targeted advertising and behavioural analytics of our current and potential customers. When you visit our website, or engage with a marketing email sent by us, your browsing activities may be tracked through cookies. Cookie-based data may be shared and exchanged with our partners for the aforementioned purposes. You can discontinue this data collection at any time by adjusting your browser settings or by opting out at our partner's site.

N.Rich Technologies Oy (https://n.rich) | Privacy notice | Opt-out | Privacy centre

Option 2 - Short cookie description

N.Rich - These cookies allow us to analyse how you use our website and to show you ads across the internet so that we can provide more relevant content for you. N.Rich permits you to opt out from use of these cookies and you can read the N.Rich Privacy Notice.

Option 3 - Detailed disclosure

Use of N.Rich ABM Tag - On our website we use a N.Rich ABM Tag from N.Rich N.Rich Technologies Oy (https://n.rich). N.Rich associates end user behaviour data to the specific company's IP address used for the website visit. It also associates your behaviour to a cookie stored in your browser, enabling tracking across consecutive sessions on our website and on other websites that include the N.Rich tag. N.Rich enables us to gather analytical data about your interests towards our content and offerings, and to target personalised advertising based on your company association. The data gathered may also be associated with your direct personal details such as name and email, as long as we have a legal basis to do so. Data is processed in accordance with the N.Rich Privacy Notice. You can opt out at any time via the N.Rich opt-out form or by enabling your browser's Do Not Track feature.

For real-world examples of how customers have included this in their privacy notices, search for "N.Rich" on:

Disclaimer

Clients are responsible for ensuring that the N.Rich tag is implemented in compliance with applicable laws - including valid consent collection, transparency obligations, and lawful configuration of tracking technologies. N.Rich Technologies Oy cannot be held liable for misconfigurations of the N.Rich tag. As an N.Rich client, you bear sole responsibility for setting up the tag in a way that complies with applicable legislation, including the EU General Data Protection Regulation (GDPR), the EU ePrivacy Directive, and the California Consumer Privacy Act (CCPA).

Need help? Reach out via the chat in the bottom-left corner of the N.Rich platform - our support team is happy to help.