VestaeBeta

Legal

Cookie policy

Every cookie this website sets, what it is for, and how long it lasts. There are not many, and that is on purpose.

Nothing non-essential is running

Right now this website loads no analytics scripts and no marketing scripts at all. None are configured. If you press Accept all, nothing extra loads, because there is nothing extra to load.

We would rather say that plainly than list a page of tags we do not use. If it changes, this page changes with it and the banner will ask you again.

The cookies we actually set

Four, and two of those only appear if you go to a sign in page.

cc_subject

An anonymous identifier the cookie banner creates so your choice can be tied to a record without us knowing who you are. Lasts 365 days. Strictly necessary.

cc_choice

Your cookie choices and the version of the policy you were shown. Lasts 180 days. Strictly necessary.

__Host-authjs.csrf-token

Set only on sign in pages. Protects the sign in form against cross site request forgery. HttpOnly and Secure. Lasts for your session. Strictly necessary.

__Secure-authjs.callback-url

Set only on sign in pages. Remembers where to send you after you sign in. HttpOnly and Secure. Lasts for your session. Strictly necessary.

The four categories on the banner

One of them is in use. The other three are there so that if we ever do load something, you get to decide first.

01

Strictly necessary

Always on, and they do not need your permission because the site cannot work without them. cc_subject and cc_choice sit here, along with the two sign in cookies.

02

Analytics

Would cover measuring how the site is used. Nothing in this category is currently loaded.

03

Marketing

Would cover advertising and tracking you across other sites. Nothing in this category is currently loaded.

04

Functional

Would cover optional conveniences such as remembering a preference. Nothing in this category is currently loaded.

How the banner behaves

Non-essential scripts run only after you have made a choice. Nothing in the analytics, marketing or functional categories runs before you have decided, and today nothing in them runs afterwards either.

Reject all and Accept all sit at equal prominence. Same size, same place, same weight. Neither one is hidden, greyed out or made harder to press than the other.

Changing your mind

You can change or withdraw your choice at any time using the cookie banner control on this site. Open it, choose again, and the new choice replaces the old one.

You can also clear cookies in your browser. That removes cc_subject and cc_choice, and the banner will start from scratch the next time you visit.

What the consent record contains

When you make a choice we keep a record of it. That record contains the choice you made, the version of this policy you saw, the user agent your browser sent, and a one way hashed form of your IP address.

The raw IP address is not stored. Hashing it one way means we can tell two records apart without being able to read an address back out of them.

We keep the record because the law expects us to be able to show what you chose and when you chose it.

Everything else this site collects

Cookies are only part of it. The waitlist, the contact form and the AI assistant are covered in the privacy policy at /privacy-policy.

This page was last updated on 14 August 2026.