This Cookie Policy explains what cookies are, what cookies Celestial Verity uses, why we use them, and how you can control them. Strictly necessary cookies operate without your consent. All other cookies require your explicit consent before they are set.
This policy forms part of our Privacy Policy and is governed by the Privacy and Electronic Communications Regulations 2003 (PECR) and the UK General Data Protection Regulation (UK GDPR).
Cookies are small text files placed on your device — computer, tablet, or mobile phone — when you visit a website. They allow the website to recognise your device and store certain information about your preferences, session state, or behaviour.
Cookies do not contain executable code and cannot carry viruses. They cannot access other information on your device. Their purpose is limited to what is described in this policy.
Similar technologies — including local storage, session storage, and pixel tags — may also be used alongside cookies. References to "cookies" in this policy include these technologies where relevant. Email tracking pixels, which may record whether an email sent to you was opened, are a separate technology from browser cookies and are described in Section 7 under Brevo.
First-party cookies are set directly by Celestial Verity and can only be read by us.
Third-party cookies are set by our technology partners — Stripe, CookieYes, and our messaging provider — subject to their own privacy policies.
The data controller responsible for cookies set on this platform is:
Celestial AI Agents Ltd (trading as Celestial Verity)
Company No. 16511006
27 Streatfield Road, Harrow, HA3 9BP
England & Wales
ICO Registration: ZB921838
Contact: support@celestialverity.com
For third-party cookies, the relevant third party acts as an independent data controller or processor as described in Section 7.
Celestial Verity uses cookies for the following purposes:
To operate the platform — authentication, session management, security, shopping cart and checkout integrity, and payment processing. These cookies cannot be disabled without breaking core platform functionality. They are set automatically and require no consent under PECR Regulation 6(4).
To remember your preferences — including your cookie consent choices — so you do not have to repeat them on every visit. These require your consent.
To understand how the platform is used — which pages are visited, where visitors arrive from, and how users move through the platform. These cookies are used in aggregate to improve the platform and require your explicit consent before they are set.
We do not use advertising or marketing cookies. No cookie on this platform tracks you for advertising purposes, builds an advertising profile, or shares your data with advertising networks. This is by design and will not change.
These cookies are essential for the platform to function. They do not require consent under PECR and cannot be switched off. They are set in response to actions you take — logging in, placing an order, or moving through checkout. The Platform's admin area uses WordPress authentication cookies; admin access to User data is separately governed by the Terms of Use (Section 31.4) and Privacy Policy (Section 10).
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| wordpress_logged_in_* | Authenticates you as a logged-in user. Without this cookie your session cannot be maintained across pages. | Session | Strictly Necessary |
| wordpress_sec_* | Stores your authentication credentials securely in the WordPress admin area. | Session | Strictly Necessary |
| wp-settings-* | Stores WordPress interface preferences. Only set for logged-in administrators. | 1 year | Strictly Necessary |
| woocommerce_cart_hash | Stores a hash of your cart contents to ensure consistent cart display across pages. | Session | Strictly Necessary |
| woocommerce_items_in_cart | Indicates whether your cart contains items so the cart icon can be updated. | Session | Strictly Necessary |
| wc_session_cookie_* | Manages your WooCommerce session — cart contents, checkout state, and order processing. | 2 days | Strictly Necessary |
| wc_fragments_* | Stores cart fragment data so the cart updates without a full page reload. | Session | Strictly Necessary |
| PHPSESSID | Identifies your server-side session. Required for secure form submissions and checkout. | Session | Strictly Necessary |
| __stripe_mid | Set by Stripe during payment processing. Used for fraud prevention and payment session integrity. Essential for checkout to function. | 1 year | Strictly Necessary |
| __stripe_sid | Set by Stripe. Maintains your payment session during checkout. Deleted when the browser is closed. | Session | Strictly Necessary |
Note: Stripe cookies have been moved from Section 7 to Section 4 because they are strictly necessary for payment processing to function. They cannot be disabled without preventing checkout.
These cookies remember your choices and improve your experience. They require your consent. The most important functional cookies on this platform are the consent management cookies set by CookieYes, which record your cookie preferences so you are not asked again on every visit.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| cookieyes-consent | Set by CookieYes. Stores your cookie consent preferences — which categories you accepted or declined — so you are not asked again on return visits. | 1 year | Functional |
| cky-active-check | Set by CookieYes. Checks that the consent management service is active on the page. | Session | Functional |
| cky_audit_log | Set by CookieYes. Records a timestamped log of your consent decisions for audit and compliance purposes under PECR and UK GDPR. | 1 year | Functional |
Note on the consent paradox: the cookieyes-consent cookie itself is classified as functional and requires consent. However, CookieYes sets this cookie to record your consent decision before you have technically given consent. This is a recognised and accepted approach under PECR — the cookie is limited solely to recording the consent choice and has no other function.
These cookies collect information about how visitors use the platform — which pages are viewed, how long visitors stay, and where traffic originates. All data is used in aggregate to improve platform performance. Analytics cookies are only set after you have given your explicit consent. If you decline, no visit tracking data is collected about you.
| Cookie | Set By | Purpose | Duration | Type |
|---|---|---|---|---|
| sbjs_current | Sourcebuster | Records the traffic source of your current visit — search engine, referral, direct, or social. Data is anonymous and used in aggregate only. | Session | Analytics |
| sbjs_first | Sourcebuster | Records the traffic source of your first ever visit to the platform. Used to understand how new visitors discover the platform. | Session | Analytics |
| sbjs_udata | Sourcebuster | Stores anonymous user data associated with the visit source. | Session | Analytics |
| sbjs_session | Sourcebuster | Tracks session-level attribution data for visit source analysis. | 1 hour | Analytics |
| sbjs_current_add | Sourcebuster | Supplementary data associated with the current visit source. | Session | Analytics |
| sbjs_first_add | Sourcebuster | Supplementary data associated with the first visit source. | Session | Analytics |
| sbjs_migrations | Sourcebuster | Records the Sourcebuster library version for data migration tracking. | Session | Analytics |
Sourcebuster is an open-source JavaScript library used to track visit attribution data. It does not set third-party cookies — all data it collects is stored in first-party cookies readable only by Celestial Verity. No data is sent to any Sourcebuster server. The data is processed entirely within the Platform's own analytics environment.
Some services integrated with this platform may set cookies or process data in connection with your use of the platform. These third parties act as independent data controllers where specified.
Stripe's payment session cookies (__stripe_mid and __stripe_sid) are classified as strictly necessary and listed in Section 4. Beyond these, Stripe may process payment-related data server-side in connection with fraud prevention and payment authorisation. This processing is governed by Stripe's own privacy policy and their role as an independent data controller for their own fraud and security systems.
Stripe's privacy policy: stripe.com/gb/privacy
CookieYes provides the cookie consent management banner on this platform. It sets the functional cookies described in Section 5 to store your consent preferences and maintain a compliance audit log. CookieYes processes consent data in accordance with its own privacy policy and as a data processor under the Platform's instructions.
CookieYes privacy policy: cookieyes.com/privacy-policy
The Platform's messaging inbox is operated by a third-party provider. This provider may set session-level cookies or use local storage to maintain your messaging session state — for example, to keep your inbox open between page loads and to deliver real-time message notifications. These cookies are strictly necessary for the messaging system to function and are set only when you access the Platform's messaging inbox.
The Platform only uses messaging providers who have entered into a Data Processing Agreement (DPA) under UK GDPR Article 28. Message content is not used by the provider for their own purposes. The current messaging provider and their privacy policy are available on request at support@celestialverity.com.
Brevo processes transactional emails sent by the platform — order confirmations, dispute notifications, account approvals, and platform communications. Brevo does not set cookies in your browser when you visit this platform. Emails sent to you by the platform may contain a tracking pixel — a small invisible image that records whether the email was opened and when. This is a standard email technology separate from browser cookies. You can prevent email tracking pixels from loading by disabling automatic image loading in your email client.
Brevo's privacy policy: brevo.com/legal/privacypolicy
This platform does not use advertising networks, social media tracking pixels, or retargeting cookies. No third-party advertising cookies are set when you visit Celestial Verity. This is by architecture — not policy that can be changed without updating this document and obtaining fresh consent.
As the platform grows, additional third-party services may be integrated. This Cookie Policy will be updated before any new cookies are set, and you will be prompted to review and renew your consent through the consent banner where new optional cookies are introduced.
Cookies on this platform are either session cookies or persistent cookies:
Session cookies are temporary. They exist only for the duration of your visit and are automatically deleted when you close your browser. The majority of cookies on this platform — including most authentication and analytics cookies — are session cookies.
Persistent cookies remain on your device after your browser is closed, up to the duration stated in the cookie tables above. They allow the platform to recognise you on a return visit. The longest-lived persistent cookies on this platform are the consent preference cookies set by CookieYes (1 year) and the WordPress interface preferences cookie (1 year). Stripe's fraud prevention cookie (__stripe_mid) also persists for 1 year in accordance with Stripe's security requirements.
When you first visit Celestial Verity, a cookie consent banner is displayed. This banner gives you the ability to:
Accept all cookies — strictly necessary, functional, and analytics cookies are all permitted.
Accept necessary only — only strictly necessary cookies are permitted. Functional and analytics cookies are not set.
Customise preferences — accept or reject each category individually.
Strictly necessary cookies do not require consent and will be set regardless of your choice. They are essential for the platform to operate and are exempt from the consent requirement under PECR Regulation 6(4).
Your consent is recorded by CookieYes with a timestamp and stored in your browser for 1 year. You may withdraw or change your consent at any time by clicking the "Cookie Preferences" link in the footer of any page, or by clearing your browser cookies and revisiting the platform. Withdrawing consent does not affect the lawfulness of any processing that took place before withdrawal. After withdrawal, optional cookies that have already been set will remain on your device until they expire naturally or until you delete them through your browser settings.
Withdrawing consent is as easy as giving it. Click "Cookie Preferences" in the footer of any page. Your preference is updated immediately.
Our legal basis for processing data through strictly necessary cookies is legitimate interests under Article 6(1)(f) UK GDPR and the exemption under Regulation 6(4) PECR. For all other cookies, our legal basis is your explicit consent under Article 6(1)(a) UK GDPR and Regulation 6(1) PECR.
You can manage and delete cookies in the following ways:
Click the "Cookie Preferences" link in the footer of any page on this platform to access the CookieYes preference centre. You can review, change, or withdraw your consent at any time. Changes take effect immediately and do not affect your ability to use the platform's core functionality.
Every major browser allows you to block or delete cookies. The method varies by browser:
Google Chrome: Settings → Privacy and Security → Cookies and other site data
Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data
Safari: Preferences → Privacy → Manage Website Data
Microsoft Edge: Settings → Cookies and site permissions → Manage and delete cookies
Blocking strictly necessary cookies will prevent the platform from functioning correctly. You will not be able to log in, maintain a session, use the messaging inbox, or complete orders if these cookies are blocked at browser level.
For cookies set by Stripe, refer to Stripe's privacy portal at stripe.com/gb/privacy. Stripe cookies related to payment security cannot be disabled without preventing payment processing from working. For CookieYes, use the preference centre described above.
Some browsers include a "Do Not Track" (DNT) signal that can be sent to websites to indicate you do not wish to be tracked. There is currently no universally accepted legal standard for how websites must respond to DNT signals in the United Kingdom.
Celestial Verity does not currently alter its cookie behaviour in response to DNT signals. However, because we do not use advertising or retargeting cookies, our data collection is already significantly more limited than most platforms. Our analytics cookies are session-only and collect only aggregate, anonymous visit source data.
If a binding legal standard for DNT is established in the United Kingdom, we will update our practices accordingly and revise this policy.
Celestial Verity may update this Cookie Policy as the platform develops, as new technology partners are integrated, or as legal requirements change. Material changes — including the introduction of new cookie categories or new third-party providers — will be communicated through the cookie consent banner before any new cookies are set. Where a new optional cookie category is introduced, you will be asked to provide fresh consent for that category specifically.
The effective date at the top of this document reflects the date of the most recent revision. You are encouraged to review this policy periodically, particularly when the consent banner prompts you to do so.
Continued use of the platform following notification of a material change constitutes acknowledgement of the updated policy for strictly necessary cookies. For optional cookies, renewed explicit consent will always be requested before those cookies are set.
If you have questions about this Cookie Policy, wish to exercise your rights under UK GDPR in relation to data processed through cookies, or wish to raise a concern, contact us at:
Celestial AI Agents Ltd (trading as Celestial Verity)
27 Streatfield Road, Harrow, HA3 9BP
support@celestialverity.com
We aim to respond to all cookie and data rights queries within one calendar month. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
ico.org.uk/make-a-complaint
Telephone: 0303 123 1113
Full details of how we handle personal data collected through cookies are set out in our Privacy Policy.