Legal · Cookies
Cookie Policy
Effective 13 October 2026 · Last updated 13 October 2026
1. Scope
This Cookie Policy explains how CERES FTS (“Cerium,” “we,” “us,” or “our”) uses cookies and similar technologies on cerium360.ai and cerium360.com and their subdomains (the “Site”) and within the Cerium platform and related services (together, the “Services”). It applies to everyone who visits the Site or uses the Services, including data subjects in the European Union, the European Economic Area, and the United Kingdom, whose rights under the GDPR and the ePrivacy Directive this policy is written to meet.
It forms part of, and should be read alongside, our Privacy Policy, which contains further detail about how we collect and use information. Capitalised terms used here and not defined have the meaning given to them in that policy.
2. What cookies are
A cookie is a small text file that a website asks your browser to store and send back on later requests. Cookies allow a site to recognise your browser between requests — which is what makes it possible to stay signed in, and what allows a service to tell one user’s session apart from another’s.
Cookies are described as first-party when set by the site you are visiting and third-party when set by another organisation through that site. They are session cookies when they are deleted as soon as you close your browser and persistent when they remain until they expire or you remove them.
3. Categories of use
Cookies are commonly grouped by what they are used for. We use two of those categories, and no others:
- Authentication — recognising that you are signed in, and to which account, so that the platform shows you your own data and does not sign you out between pages.
- Security — binding a session to your browser, enforcing session rules, and protecting requests against cross-site request forgery and other malicious activity.
We do not use cookies for preferences and personalisation, marketing, or performance, analytics, and research. Both categories we do use are strictly necessary to deliver the Services you have asked for.
4. Cookies we use
Every cookie we set is first-party and strictly necessary: each one exists to sign you in, keep you signed in, or protect your session from attack. All are set by the Cerium platform on our own domains. The public marketing pages of cerium360.com set no cookies at all.
| Name | Purpose | Category | Party | Duration |
|---|---|---|---|---|
ATN | Carries the signed access token that authenticates each request you make to the platform. Without it you would be signed out on every page load. | Authentication | First party | Persistent — short-lived, expires with the access token |
accessToken | Holds a short-lived access token issued when your session is renewed, used to authorise your requests to the platform. | Authentication | First party | Session — removed when the browser closes |
RTN | Carries the signed refresh token, used to issue a new access token when the current one expires so that you are not forced to sign in again mid-session. | Authentication | First party | Persistent — expires with the refresh token |
LASID | Login Account Security ID. Binds your browser to a specific sign-in so we can enforce session rules, detect concurrent sessions, and end a session on sign-out. | Security | First party | Persistent — expires with the refresh token |
CTN | Holds an encrypted cross-site request forgery (CSRF) token. It lets the platform confirm that a request genuinely came from you and not from a malicious site acting in your name. | Security | First party | Session — removed when the browser closes |
connect.sid | Server-side session identifier used to associate your requests with security state held on our servers, including CSRF protection. | Security | First party | Persistent — expires after the configured session lifetime |
The Site and the Services are served over HTTPS, so these cookies are transmitted over an encrypted connection. Most are marked HttpOnly, meaning they cannot be read by scripts running in the page, and all are scoped so that they are only returned to our own servers. None of them stores your name, email address, or other directly identifying information in the cookie value itself. We keep this table up to date, but the number and names of cookies may change as the platform changes.
5. Cookies we do not use
We do not use, and do not permit others to place:
- Analytics or performance-measurement cookies, including Google Analytics.
- Advertising, retargeting, or audience-profiling cookies.
- Marketing-automation cookies tied to email campaigns or landing pages.
- Social-media sharing or embedded-widget cookies.
- Any third-party cookie set through the Site or the Services.
Because we set only strictly necessary cookies, the Site does not present a cookie consent banner and we do not operate a cookie consent manager — there is no non-essential category for you to switch off. Under the EU ePrivacy Directive and comparable regimes, cookies that are essential to deliver a service the user has requested do not require prior consent. If we ever introduce a non-essential cookie, we will update this policy and obtain your consent before setting it.
6. Similar technologies
We do not use web beacons, single-pixel GIFs, tracking pixels, tags, or device fingerprinting, on the Site or in our emails.
The Services may use your browser’s local and session storage to hold interface preferences — for example a chosen theme, an open panel, or an unsent draft. This data stays in your browser, is not transmitted to us, and can be cleared at any time through your browser’s “clear site data” controls.
7. Third-party websites
While using the Site or the Services you may be directed to a website we do not operate — for example to complete a payment through our payment processor, to view content hosted elsewhere, or to follow a link we have published. Those websites may set their own cookies under their own policies. We have no control over cookies placed by another website, even where you reached it from ours, and this policy does not cover them.
8. Managing and deleting cookies
You can view, block, and delete cookies through your browser settings. Every major browser provides these controls under its privacy or site-data settings — usually within a “Settings,” “Preferences,” or “Help” menu — and most offer an option to block cookies entirely or to clear them when the browser closes.
Blocking a cookie and deleting one are different actions: changing a browser setting to refuse future cookies does not remove cookies already stored, which you must clear separately through your browser.
Because the cookies we set are the mechanism by which you remain signed in, blocking or deleting them will sign you out and prevent you from using the platform. There is no way to authenticate to the Services with cookies disabled. Browsing the public pages of the Site is unaffected.
9. Do Not Track signals
We do not collect information about your activity over time and across third-party websites or services, so there is no cross-site tracking for a “Do Not Track” signal to switch off. Browser Do Not Track signals therefore do not apply to the Site or the Services, and we do not change our data practices on receiving one.
10. Customer data
Where you use the Services as a user of one of our customers, that customer is the controller of the data processed within their account and we act as processor on their instructions. The cookies described above are set by us to operate and secure the platform itself, and are not used to profile end users on our customers’ behalf.
11. Changes to this policy
We may update this policy from time to time — for example if we add a cookie or change what an existing one does. When we do, we will revise the “Last updated” date above. Material changes, including the introduction of any non-essential cookie, will be notified before they take effect.
12. Contact us
If you have questions about this policy or about how we use cookies, please email us at support@cerium360.com.