What is the nmstat cookie?
This cookie is used to help record the visitor's use of the website. It is used to collect statistics about site usage such as when the visitor last visited the site. This information is then used to improve the user experience on the website. This Siteimprove Analytics cookie contains a randomly generated ID used to recognize the browser when a visitor reads a page. The cookie contains no personal information and is used only for web analytics. It is also used to track the sequence of pages a visitor looks at during a visit to the site. This information can be used to reduce user journeys, and enable visitors to find relevant information quicker.
Our October 2026 scan found it on 30 sites (1% of the 2,450 we scanned), set before any consent.
- Purpose
- Analytics
- Belongs to
- Siteimprove
- Set as
- First-party (under the site's own domain)
- Typical lifetime
- 13 months (vendor says: 3 years) — shorter than the vendor documents
Sites that set nmstat before consent
The highest-ranked 30 of 30 sites.
- cornell.edu3 tracking companies
- berkeley.edu4 tracking companies
- yale.edu3 tracking companies
- uchicago.edu5 tracking companies
- sec.gov4 tracking companies
- jhu.edu5 tracking companies
- bls.gov4 tracking companies
- justice.gov5 tracking companies
- purdue.edu19 tracking companies
- unc.edu8 tracking companies
Show 20 more sites
- umd.edu3 tracking companies
- dhs.gov5 tracking companies
- usa.gov5 tracking companies
- ucsb.edu6 tracking companies
- dol.gov5 tracking companies
- tufts.edu12 tracking companies
- cisa.gov5 tracking companies
- fsu.edu8 tracking companies
- dish.com18 tracking companies
- iastate.edu8 tracking companies
- uiowa.edu11 tracking companies
- uscis.gov7 tracking companies
- iu.edu15 tracking companies
- usf.edu7 tracking companies
- udel.edu9 tracking companies
- mo.gov2 tracking companies
- in.gov3 tracking companies
- ucsc.edu7 tracking companies
- nj.gov4 tracking companies
- cbp.gov4 tracking companies
How to stop it
Declining non-essential cookies in a site's consent banner should stop nmstat being set on later visits. Blocking third-party cookies in your browser settings stops the third-party kind everywhere, and clearing cookies for a site removes any it already set.
Description from the Open Cookie Database (Apache 2.0).
Understanding this page
- How cookie lifetimes work, and why a 13-month _ga matters
What a cookie's "expires" field actually controls, why Google Analytics ships a 2-year default that many sites cut down to 13 months, and how Safari's 7-day cap on script-set cookies changes the picture.
- First-party vs third-party cookies (and why "first-party" still tracks you)
What the distinction actually means technically, why browsers only block one of the two, and how CNAME cloaking, server-side tagging and cookies like _ga let sites keep tracking under their own domain.
- How to block or limit trackers
Browser privacy settings, content blockers, Global Privacy Control and clearing cookies compared honestly — what each one actually stops, what it doesn't, and what it costs you in return.