Cookie Notice
1. About This Notice
1.1 What this notice covers. This Cookie Notice explains how CelesteOS LLC ("Company", "we", "us") uses cookies and similar technologies on:
(a) our marketing website at celeste7.ai and other marketing pages that link to this notice (the "Websites");
(b) the CelesteOS application at app.celeste7.ai (the "App");
(c) the Collective site at collective.celeste7.ai, including its public pages and the pages available after sign-in (the "Collective Site"); and
(d) the public record verifier at verifier.celeste7.ai (the "Verifier").
1.2 It should be read together with our Privacy Policy (https://celeste7.ai/privacy-policy).
2. Cookies and Similar Technologies
2.1 Cookies. Cookies are small text files that a website places on your device. "First-party" cookies are set by the site you are visiting. "Third-party" cookies are set by another company, such as an analytics provider, and can be used to recognize your browser across different websites.
2.2 Similar technologies. These include:
- local storage, which lets a website keep information in your browser;
- service-worker caches, which let a web app store copies of pages and data so it can work offline; and
- tags (small pieces of code), which send information about your visit to a provider.
In this notice, "cookies" includes these similar technologies unless we say otherwise.
3. Our Websites
3.1 How consent works.
- Analytics, advertising and session-analytics technologies are off by default. They run only after you accept them in our consent banner.
- We use Google Consent Mode. No Google, Contentsquare or other third-party measurement script is loaded until you opt in to the relevant category. Google Consent Mode signals are set to "denied" before any Google script loads and are updated only for the categories you accept.
- You can change or withdraw your choice at any time at the "Your Privacy Choices" link in the footer of every page.
3.2 What we use.
| Category | Provider | Name(s) (typical) | Purpose | Duration (typical) | Needs consent? |
|---|---|---|---|---|---|
| Strictly necessary | Company (first party) | celeste_consent (local storage) | Remembers your consent choice so the banner is not shown on every page | Until cleared; we ask again after 12 months | No |
| Analytics | Google (Google Analytics 4) | _ga, _ga_<ID> | Counts visits and measures how visitors use pages, in aggregate | Up to 2 years | Yes |
| Advertising | Google (Google Ads conversion measurement) | _gcl_au and Google advertising cookies | Measures whether our ads lead to visits or enquiries. Google may use this information for its own advertising purposes (see Section 7) | Up to 90 days (_gcl_au); varies for Google domains | Yes |
| Session analytics | Contentsquare (Contentsquare / Hotjar) | _hjSessionUser_<ID>, _hjSession_<ID> or _cs_id, _cs_s | Records page interactions (clicks, scrolls, mouse movement and page structure) so we can see where pages are confusing. The tool is configured to mask text typed into form fields | Up to 13 months (user ID); 30 minutes (session) | Yes |
3.3 Social media. We do not use social-media advertising pixels on the Websites.
4. The App
4.1 No cookies. The App does not use cookies, and it does not use advertising or analytics technologies of any kind.
4.2 Strictly necessary storage. The App uses the following browser storage, which is strictly necessary to provide the service you or your organization have requested. It therefore does not require consent.
| Technology | What is stored | Purpose | How long |
|---|---|---|---|
| Local storage | Session token, user identifier, email address, role, vessel name | Keeps you signed in and shows the right vessel's data | Until you sign out or the session expires |
| Service-worker (offline) cache | Copies of records you have viewed. Crew certificates are excluded | Lets you keep working on board when connectivity is poor | Up to 7 days, per user and per vessel; deleted when you sign out |
| Push subscription (only if you enable notifications) | Your browser's push endpoint | Delivers notifications through your browser or device maker's push service | Until you disable notifications or sign out |
4.3 Not encrypted on your device. This stored information is not encrypted by the App on your device. Please protect your device with encryption and a screen lock, and sign out on shared devices.
5. The Collective Site
5.1 No cookies or analytics. The Collective Site does not use cookies, and it does not use advertising, analytics or session-analytics technologies. No consent banner is shown because nothing on it requires consent. All of its scripts and fonts are served from the Collective Site's own domain, and it loads no files from third parties.
5.2 What it uses.
| Technology | Provider | What happens | Purpose | How long | Needs consent? |
|---|---|---|---|---|---|
| Local storage | Company (first party) | Your session token is stored in your browser after you sign in (key sb-…-auth-token, the standard session key of our authentication library) | Keeps you signed in | Until you sign out or the session expires | No (strictly necessary) |
6. The Verifier
The Verifier uses no cookies, no browser storage and no analytics, and loads no files from third parties: its fonts are served from the Verifier site itself. It runs entirely in your browser, and the file you check is never uploaded.
7. Your Choices
7.1 Consent banner and settings. Accept, reject or adjust analytics, advertising and session-analytics technologies at any time at the "Your Privacy Choices" link in the footer of every page. Rejecting them does not affect your use of the Websites.
7.2 Global Privacy Control. If your browser sends a Global Privacy Control ("GPC") signal, we treat it as a request to opt out of the "sale" or "sharing" of your personal information and of targeted advertising. We will not enable advertising technologies for that browser. If you had previously accepted them, GPC overrides that choice for as long as your browser sends the signal.
7.3 "Your Privacy Choices". US residents can also opt out at the "Your Privacy Choices" link in the footer of our Websites or by emailing contact@celeste7.ai.
7.4 Google controls. You can manage Google ad personalization at adssettings.google.com. You can also block Google Analytics with Google's opt-out browser add-on (tools.google.com/dlpage/gaoptout).
7.5 Browser controls. Most browsers let you block or delete cookies and clear site data. Clearing site data for app.celeste7.ai signs you out of the App and removes its offline cache. Signing out of the App also removes the offline cache. Clearing site data for collective.celeste7.ai signs you out of the Collective Site.
7.6 Do Not Track. There is no common standard for "Do Not Track" browser signals, so we do not respond to them. We do honor GPC (Section 7.2).
7.7 Scope of choices. Choices made through the banner, GPC or browser settings apply only to the browser and device on which you make them.
8. Changes
We will update this notice when the technologies we use change, and we will change the effective date above. If we add a new category of non-essential technology, we will ask for your consent again.
9. Contact
Questions: contact@celeste7.ai, or CelesteOS LLC, 7901 4th St N, #36609, St Petersburg, FL 33702, USA.
Version 1.0 — effective October 15, 2026.
Portions of this document are adapted from the Cookie Notice template prepared and made publicly available by General Legal, PC ("General Legal") under CC0. General Legal has not reviewed, and takes no position on, this adaptation, and its use does not create an attorney-client relationship with General Legal.