Cookies & Tracking

SeyAero is a closed professional workspace, not an advertising surface. We set only what is strictly necessary to keep you signed in and to keep the platform secure. We do not run advertising cookies, cross-site trackers, fingerprinting, session replay or third-party marketing pixels, and we do not sell or share personal information for cross-context behavioural advertising within the meaning of the CPRA.

Because everything we set is strictly necessary, no consent banner is required under Article 5(3) of the ePrivacy Directive. If we ever introduce optional analytics, we will ask for opt-in consent first and record it.

• Authentication session (local storage, key prefixed sb-…-auth-token) — keeps you signed in and refreshes your session. Lifetime: until sign-out or token expiry. Strictly necessary.
• Session refresh cookie — issued during server-rendered navigation to maintain the authenticated session. Lifetime: session to 7 days. Strictly necessary.
• Security and abuse-prevention tokens set by our edge provider — mitigate automated attack traffic. Lifetime: up to 30 days. Strictly necessary.
• Interface preferences (local storage) — chosen case view, panel layout, timeline zoom. Lifetime: until cleared. Strictly necessary to deliver the service you requested.
• MFA trust marker, where you enrol in multi-factor authentication and choose to trust a device. Lifetime: up to 30 days. Strictly necessary security function.

No case content, evidence, or personal data from a case file is ever written to browser storage beyond the transient memory of the page you are viewing.

You can clear or block browser storage at any time through your browser settings. Blocking the authentication items will sign you out and prevent the platform from functioning; that is a technical consequence, not a penalty.

Global Privacy Control (GPC) signals are honoured. Because we do not sell or share personal information, a GPC signal produces no change in processing, and we record that we received it.

Transactional emails — verification, password recovery, security alerts, invoices — contain no tracking pixels. Where you opt in to product-update email, we may measure open and click rates in aggregate; you can withdraw consent from any message footer.