Cookie Notice
This notice explains the cookies Astravera sets when you use our products and visit this site, and why we do not display a consent banner.
What cookies are
A cookie is a small text file that a website stores on your device. Cookies have many uses; ours are limited to keeping you signed in, defending against cross-site request forgery, and remembering your language and theme preferences.
Cookies we set
We use only strictly-necessary functional cookies. The full list:
| Cookie | Purpose | Type | Expiry |
|---|---|---|---|
hermes_session | Authenticated session | Strictly necessary | Session / configurable per workspace |
XSRF-TOKEN | CSRF defence | Strictly necessary | Session |
astravera_locale | Your language preference | Functional | 12 months |
astravera_theme | Your light/dark theme preference | Functional | 12 months |
That is the complete list. We do not set, and we do not allow any third party to set:
- Advertising cookies.
- Analytics cookies (no Google Analytics, no Plausible, no Matomo, no Mixpanel, no PostHog).
- Behavioural tracking cookies.
- Third-party social cookies.
- Cross-site tracking cookies.
Why we do not show a banner
Under the EU ePrivacy Directive and the UK PECR, consent is required only for cookies that are not strictly necessary for the service you requested. Our cookies are all strictly necessary or strictly functional (language/theme preferences are widely accepted as functional under both regimes).
We considered showing a banner anyway as a courtesy. We chose not to because:
- An interstitial that asks for consent it does not legally need wastes your attention.
- Banners normalise behaviours that should remain rare.
- The honest information about what we set lives on this page, where you can read it without being interrupted.
If we ever add a cookie that requires consent (for example, opt-in analytics), we will add a consent banner before the cookie is set, and we will update this page.
How to control cookies
Most browsers let you reject or delete cookies via their settings. Because our cookies are strictly necessary or functional, rejecting them will degrade your experience: you will be signed out, your CSRF defences will not work, and your language and theme preferences will not persist between visits.
Local storage and similar technologies
We may use local storage to cache UI state (for example, which sidebar section is open). Some regulators (including the UK ICO) consider local storage to fall within the same legal framework as cookies under the ePrivacy Directive / PECR. Since our local storage use is strictly functional, no consent is required under either interpretation. Local-storage entries do not contain personal data beyond your own UI choices.
Updates
We will update this page if our cookie set changes. Material changes are notified in line with our Privacy Policy.
Contact
[email protected] for any cookie or privacy question.