Online Actions forms and pages can be integrated with third-party cookie consent management tools enabled by JavaScript plug-ins for compliance with privacy laws like GDPR and CCPA. This allows supporters to opt in to or reject non-necessary cookies whether they visit your website or an Online Actions form first.
Integration Steps
- Install and configure your preferred cookie consent manager on your website.
- Go to Online Actions Settings and choose one of the following for cookie consent management:
- Enable on Themes - This will allow you to enter cookie control code directly in an Online Actions theme to use with any form or page. For added flexibility, create a Reusable to add the code to more than one theme.
- Enable on Embedded Forms or Pages - This will allow you to control cookies on embedded NGP VAN forms and pages after adding the code to your own website.
- Enable All - This will allow you to control cookies on themes or forms and pages.
- After you've added the cookie consent management code to either your website or a theme, check the cookie consent option on either the theme or form. This prevents the form from immediately loading all cookies, allowing the cookie consent manager to take control and enact the user's preferences.
Managing Online Actions Cookies Using JavaScript
The following JavaScript methods allow storing or revoking Online Actions cookies. Consult your cookie consent management tool’s documentation for instructions on how to call these methods.
| Method | Description |
|---|---|
window.nvtag.acceptFunctionalCookies() | Enable functional cookies on forms |
window.nvtag.revokeFunctionalCookies() | Revoke functional cookies on forms |
window.page.acceptPerformanceCookies() | Accept functional cookies on pages |
window.page.revokePerformanceCookies() | Revoke functional cookies on pages |
Cookies Supporting Networked Features
FastAction allows supporters to store contact and payment information for use on websites that use NGP VAN. NGP VAN will not store associated cookies if they opt out on your website, but we will not delete associated cookies stored as a result of visits to other websites where they opted in or that do not manage cookies.
Online Actions Cookies by Category
Privacy laws typically require categorization of cookies by purpose and disclosure of cookies by name and purpose on your website. Below is a list of all cookies used by Online Actions forms and pages. Note that some are used to support form types or optional features that you may choose not to use. No functional cookies are used on pages, and marketing cookies are not used at all.
| Name | Source | Type | Expiration | Category | Purpose |
|---|---|---|---|---|---|
incap_ses_* | Third Party: Imperva | Session | Removed at the end of the session | Strictly Necessary | Used to map HTTP requests to sessions to enable DDoS and web application firewall protection. |
nlbi_* | Third Party: Imperva | Session | Removed at the end of the session | Strictly Necessary | Used to ensure requests by a client are sent to the origin server to enable DDoS and web application firewall protection. |
visid_incap_* | Third Party: Imperva | Persistent | 1 year | Strictly Necessary | Used to relate sessions to a visitor’s device to determine which clients have already visited to enable DDoS protection and web application firewall protection. |
.AspNet.OASupporterAuthCookie, OpenIdConnect.nonce.* | First Party | Session | Removed at the end of the session | Strictly Necessary | Used to store session key information required for logging in to Attendee Check-In pages. |
SessionKeyCookie | First Party | Session | 1 hour | Strictly Necessary | Used to allow access to features requiring login. |
ai_session | Third Party: Microsoft | Session | Removed at the end of the session | Analytical/Performance | Used to collect statistical usage and troubleshooting information for the web application. |
ai_user | Third Party: Microsoft | Persistent | 1 year | Analytical/Performance | Used to enable counting of the number of users accessing the application over time to collect statistical usage and troubleshooting information for the web application. |
`_utm*,
| Third Party: Google | Session, Persistent | _utm_ (30 minutes session-based to 2 years)_ga (2 years)_gid (24 hours)_gat (1 minute)_dc_gtm_UA-* (2 years) | Analytical/Performance | Used to collect Google Analytics data if added to forms or pages. |
connect.sid | First Party | Persistent | 3 years | Functionality | Used to remember and pre-fill payment and contact information if users have signed up for the FastAction network. |
FormPageLoadFastActionSessionId | First Party | Persistent | 10 years | Functionality | Used to remember and fill contact information into conditional content on forms |
_pxvid | Third Party: Human Security | JS | 1 year | Strictly Necessary | Used for browser detection and distinguishing between real users and bots. |
pxcts | Third Party: Human Security | JS | Session | Strictly Necessary | Used to maintain a cross-tab session |
__pxvid | Third Party: Human Security | JS | 1 year | Strictly Necessary | Used to distinguish individual users for cost analysis and metrics tracking, such as how many users were exposed to certain script-driven behaviors. |
_px* | Third Party: Human Security | JS | 5.5 minutes | Strictly Necessary | Used to maintain a session with HUMAN. It does not correspond to any user ID in the web application and does not store any personally identifiable information. |
LocalStorage
These key-value pairs stored in the user's local storage in the browser will follow the behavior of cookies outlined on this page according to their category.
| Key | Category | Purpose |
|---|---|---|
fastActionSessionId | Functionality | Used to remember and pre-fill payment and contact information if users have signed up for the FastAction network. |
px_33df3rmnerrf5 | Strictly Necessary | Used to enable HUMAN Security PCI sensor. |
Deprecated Cookies
The following cookies are no longer in use.
| Name | Source | Type | Expiration | Category | Purpose |
|---|---|---|---|---|---|
FastActionDatabagId | First Party | Persistent | 10 years | Functionality | Used to remember and pre-fill payment and contact information on forms if users have signed up for the FastAction network. |
ProfileDatabagId | First Party | Persistent | 10 years | Functionality | Used to remember and pre-fill contact information on forms. |
ngpvanuser | First Party | Persistent | 10 years | Functionality | Used to remember and pre-fill contact information on forms. |