Online Actions forms and pages can be integrated with third-party cookie consent management tools enabled by JavaScript plug-ins for compliance with privacy laws like GDPR and CCPA. This allows supporters to opt in to or reject non-necessary cookies whether they visit your website or an Online Actions form first.

Integration Steps

Install and configure your preferred cookie consent manager on your website.
Go to Online Actions Settings and choose one of the following for cookie consent management:

Enable on Themes - This will allow you to enter cookie control code directly in an Online Actions theme to use with any form or page. For added flexibility, create a Reusable to add the code to more than one theme.
Enable on Embedded Forms or Pages - This will allow you to control cookies on embedded NGP VAN forms and pages after adding the code to your own website.
Enable All - This will allow you to control cookies on themes or forms and pages.

After you've added the cookie consent management code to either your website or a theme, check the cookie consent option on either the theme or form. This prevents the form from immediately loading all cookies, allowing the cookie consent manager to take control and enact the user's preferences.

Managing Online Actions Cookies Using JavaScript

The following JavaScript methods allow storing or revoking Online Actions cookies. Consult your cookie consent management tool’s documentation for instructions on how to call these methods.

Method	Description
`window.nvtag.acceptFunctionalCookies()`	Enable functional cookies on forms
`window.nvtag.revokeFunctionalCookies()`	Revoke functional cookies on forms
`window.page.acceptPerformanceCookies()`	Accept functional cookies on pages
`window.page.revokePerformanceCookies()`	Revoke functional cookies on pages

Cookies Supporting Networked Features

FastAction allows supporters to store contact and payment information for use on websites that use NGP VAN. NGP VAN will not store associated cookies if they opt out on your website, but we will not delete associated cookies stored as a result of visits to other websites where they opted in or that do not manage cookies.

Online Actions Cookies by Category

Privacy laws typically require categorization of cookies by purpose and disclosure of cookies by name and purpose on your website. Below is a list of all cookies used by Online Actions forms and pages. Note that some are used to support form types or optional features that you may choose not to use. No functional cookies are used on pages, and marketing cookies are not used at all.

Name	Source	Type	Expiration	Category	Purpose
`incap_ses_*`	Third Party: Imperva	Session	Removed at the end of the session	Strictly Necessary	Used to map HTTP requests to sessions to enable DDoS and web application firewall protection.
`nlbi_*`	Third Party: Imperva	Session	Removed at the end of the session	Strictly Necessary	Used to ensure requests by a client are sent to the origin server to enable DDoS and web application firewall protection.
`visid_incap_*`	Third Party: Imperva	Persistent	1 year	Strictly Necessary	Used to relate sessions to a visitor’s device to determine which clients have already visited to enable DDoS protection and web application firewall protection.
`.AspNet.OASupporterAuthCookie, OpenIdConnect.nonce.*`	First Party	Session	Removed at the end of the session	Strictly Necessary	Used to store session key information required for logging in to Attendee Check-In pages.
`SessionKeyCookie`	First Party	Session	1 hour	Strictly Necessary	Used to allow access to features requiring login.
`ai_session`	Third Party: Microsoft	Session	Removed at the end of the session	Analytical/Performance	Used to collect statistical usage and troubleshooting information for the web application.
`ai_user`	Third Party: Microsoft	Persistent	1 year	Analytical/Performance	Used to enable counting of the number of users accessing the application over time to collect statistical usage and troubleshooting information for the web application.
`_utm, ga, gid_, dc_gtm_UA-`	Third Party: Google	Session, Persistent	`_utm`_ (30 minutes session-based to 2 years) `_ga` (2 years) `_gid` (24 hours) `_gat` (1 minute) `_dc_gtm_UA-*` (2 years)	Analytical/Performance	Used to collect Google Analytics data if added to forms or pages.
`connect.sid`	First Party	Persistent	3 years	Functionality	Used to remember and pre-fill payment and contact information if users have signed up for the FastAction network.
`FormPageLoadFastActionSessionId`	First Party	Persistent	10 years	Functionality	Used to remember and fill contact information into conditional content on forms
`_pxvid`	Third Party: Human Security	JS	1 year	Strictly Necessary	Used for browser detection and distinguishing between real users and bots.
`pxcts`	Third Party: Human Security	JS	Session	Strictly Necessary	Used to maintain a cross-tab session
`__pxvid`	Third Party: Human Security	JS	1 year	Strictly Necessary	Used to distinguish individual users for cost analysis and metrics tracking, such as how many users were exposed to certain script-driven behaviors.
`_px*`	Third Party: Human Security	JS	5.5 minutes	Strictly Necessary	Used to maintain a session with HUMAN. It does not correspond to any user ID in the web application and does not store any personally identifiable information.

LocalStorage

These key-value pairs stored in the user's local storage in the browser will follow the behavior of cookies outlined on this page according to their category.

Key	Category	Purpose
`fastActionSessionId`	Functionality	Used to remember and pre-fill payment and contact information if users have signed up for the FastAction network.
`px_33df3rmnerrf5`	Strictly Necessary	Used to enable HUMAN Security PCI sensor.

Deprecated Cookies

The following cookies are no longer in use.

Name	Source	Type	Expiration	Category	Purpose
`FastActionDatabagId`	First Party	Persistent	10 years	Functionality	Used to remember and pre-fill payment and contact information on forms if users have signed up for the FastAction network.
`ProfileDatabagId`	First Party	Persistent	10 years	Functionality	Used to remember and pre-fill contact information on forms.
`ngpvanuser`	First Party	Persistent	10 years	Functionality	Used to remember and pre-fill contact information on forms.