Cookie Consent Management

Online Actions forms and pages can be integrated with third-party cookie consent management tools enabled by JavaScript plug-ins for compliance with privacy laws like GDPR and CCPA. This allows supporters to opt in to or reject non-necessary cookies whether they visit your website or an Online Actions form first.

Integration Steps

  1. Install and configure your preferred cookie consent manager on your website.
  2. Go to Online Actions Settings and choose one of the following for cookie consent management:
  • Enable on Themes - This will allow you to enter cookie control code directly in an Online Actions theme to use with any form or page. For added flexibility, create a Reusable to add the code to more than one theme.
  • Enable on Embedded Forms or Pages - This will allow you to control cookies on embedded NGP VAN forms and pages after adding the code to your own website.
  • Enable All - This will allow you to control cookies on themes or forms and pages.
  1. After you've added the cookie consent management code to either your website or a theme, check the cookie consent option on either the theme or form. This prevents the form from immediately loading all cookies, allowing the cookie consent manager to take control and enact the user's preferences.

Managing Online Actions Cookies Using JavaScript

The following JavaScript methods allow storing or revoking Online Actions cookies. Consult your cookie consent management tool’s documentation for instructions on how to call these methods.

MethodDescription
window.nvtag.acceptFunctionalCookies()Enable functional cookies on forms
window.nvtag.revokeFunctionalCookies()Revoke functional cookies on forms
window.page.acceptPerformanceCookiesAccept functional cookies on pages
window.page.revokePerformanceCookiesRevoke functional cookies on pages

Cookies Supporting Networked Features

FastAction allows supporters to store contact and payment information for use on website that uses NGP VAN. Databag stores contact information only. Both are used to help supporters quickly fill out forms. NGP VAN will not store associated cookies if they opt out on your website, but we will not delete associated cookies stored as a result of visits to other websites where they opted in or that do not manage cookies.

Online Actions Cookies by Category

Privacy laws typically require categorization of cookies by purpose and disclosure of cookies by name and purpose on your website. Below is a list of all cookies used by Online Actions forms and pages. Note that some are used to support form types or optional features that you may choose not to use. No functional cookies are used on pages, and marketing cookies are not used at all.

NameSourceTypeExpirationCategoryPurpose
incap_ses_*Third Party: ImpervaSessionRemoved at the end of the sessionStrictly NecessaryUsed to map HTTP requests to sessions to enable DDoS and web application firewall protection.
nlbi_*Third Party: ImpervaSessionRemoved at the end of the sessionStrictly NecessaryUsed to ensure requests by a client are sent to the origin server to enable DDoS and web application firewall protection.
visid_incap_*Third Party: ImpervaPersistent1 yearStrictly NecessaryUsed to relate sessions to a visitor’s device to determine which clients have already visited to enable DDoS protection and web application firewall protection.
.AspNet.OASupporterAuthCookie, OpenIdConnect.nonce.*First PartySessionRemoved at the end of the sessionStrictly NecessaryUsed to store session key information required for logging in to Attendee Check-In pages.
ai_sessionThird Party: MicrosoftSessionRemoved at the end of the sessionAnalytical/PerformanceUsed to collect statistical usage and troubleshooting information for the web application.
ai_userThird Party: MicrosoftPersistent1 yearAnalytical/PerformanceUsed to enable counting of the number of users accessing the application over time to collect statistical usage and troubleshooting information for the web application.
_utm*, _ga, _gid_, _dc_gtm_UA-*Third Party: GoogleSession, Persistent_utm_ (30 minutes session-based to 2 years)
_ga (2 years)
_gid (24 hours)
_gat (1 minute)
_dc_gtm_UA-* (2 years)
Analytical/PerformanceUsed to collect Google Analytics data if added to forms or pages.
FastActionDatabagIdFirst PartyPersistent10 yearsFunctionalityUsed to remember and pre-fill payment and contact information on forms if users have signed up for the FastAction network.
connect.sidFirst PartyPersistent3 yearsFunctionalityUsed to remember and pre-fill payment and contact information if users have signed up for the FastAction network.
ProfileDatabagIdFirst PartyPersistent10 yearsFunctionalityUsed to remember and pre-fill contact information on forms.
ngpvanuserFirst PartyPersistent10 yearsFunctionalityUsed to remember and pre-fill contact information on forms.