Cookie policy

Last updated: 2026-10-20

This page explains what cookies and browser-local storage Cairn uses, what they're for, and how you control them. You can change your choices at any time via the Cookie preferences link in the footer.

What we set

Essential (always on)

• oceanus_sid — signed-in session. HttpOnly, SameSite=Lax. Ends when you sign out, or after 14 days.
• OCEANUS_VIS — anonymous identifier for this consent record. HttpOnly, SameSite=Lax. Kept for 13 months.
• oc_consent — the categories you allowed, so the page can keep other storage off until you allow it. SameSite=Lax. Kept for 6 months, then we ask again.
• oceanus_lang — the language you selected, so pages stay in that language. SameSite=Lax. Kept for 1 year.
• oc_mm_skip — set only after you dismiss the morning note. HttpOnly, SameSite=Lax. Expires after 20 hours.
• CSRF and security headers (no cookie set; HTTP headers only).

Functional (consent required)

Stored in this browser only after you allow functional storage (localStorage, not a cookie). If you reject functional storage, we delete these values.

• mainTheme / theme — your light/dark theme choice.
• Account settings such as idle timeout, default model, and watchlists are stored on our servers against your account. They are not cookies.

Analytics

Not in use. No analytics cookies are set. This category stays off unless you allow it. If we start using it, we will ask again first.

Marketing

Not in use. We do not sell personal information and we do not share it for cross-context advertising. No advertising cookies are set. This category stays off unless you allow it.

Your choice

Every visitor gets the same choice: accept all, reject non-essential, or set each category. Rejecting is one click, on the same screen as accepting, with the same weight. Optional categories start off. We ask again after six months, or sooner when this notice changes. If your browser sends Global Privacy Control, non-essential storage stays off until you explicitly allow it. When we can tell the country from the connection, we record that country on the consent log so it shows which law applied. We do not store the raw IP address.

Consent log

When you make a choice we append a record: the time, the action (accept all, reject non-essential, a custom selection, or withdrawal), the categories, the notice version, when the choice expires, the country and legal region when we could tell them, a one-way hash of the IP address, and a one-way hash of the browser string. We do not store the raw IP address. Records saved before 20 October 2026 may still contain the browser string; later records store only the hash. The log exists so we can show what you chose. It is not used for advertising or analytics. We keep it with the visitor identifier for up to 13 months after the last choice.

Withdrawing consent

Click Cookie preferences above, untick categories, and Save. The change takes effect immediately; we'll also delete any non-essential localStorage values we previously stored. Essential cookies remain so you can keep using the service.

Contact

Questions or requests under GDPR / UK GDPR / CCPA: contact your Cairn administrator (this is an invite-only, internally hosted application — there is no public support channel).