Legal

Cookie Notice

Last updated July 26, 2026

This notice explains how Ciele uses cookies, local storage and similar technologies on ciele.app, in the Ciele console, and across the assistants our customers publish — what each one is for, how long it lasts, and how to change or withdraw your choice. The tables below are generated from the same declaration that drives our consent banner, so what you see here is what we actually set.

01What cookies are

Cookies are small text files placed on your computer or phone when you visit a site. They hold information a web server in the issuing domain can read back later — which is how a site remembers that you are signed in, or which settings you picked.

Cookies set by the site you are visiting are called first-party cookies; only that site can read them. Cookies set by anyone else are third-party cookies, and whoever set them can often recognise your device on other sites too. Almost everything described on this page is first party.

Some cookies are session cookies, deleted the moment you close your browser. Others are persistent, and stay until they expire or you delete them. The retention column in each table below tells you which is which.

We use the word “cookies” on this page as shorthand for a few related technologies that all store or read something on your device: cookies proper, browser local storage, and pixel tags (tiny images, sometimes called tracking pixels, that record whether a page or email was opened). Local storage works much like a cookie but is not sent with every request, and we use it for interface preferences and to keep an assistant conversation continuous.

02Why we use cookies

Some cookies are technically required: without them we cannot sign you in, keep your session pointed at the right organization, or remember the choice you make about this very notice. We call those strictly necessary, and they are the only ones we set before you have decided anything.

Everything else is optional and off until you turn it on. We do not set optional cookies on the strength of you continuing to browse, and rejecting them takes exactly one click — the same as accepting.

The categories you can control, and who serves them.
Category	Your control	Served by
Strictly necessary	Always active — required to deliver the service	Ciele (Supabase Auth), Ciele, Vercel (our hosting provider)
Functional	Off until you allow it; can be withdrawn at any time	Ciele
Analytics	Off until you allow it; can be withdrawn at any time	Vercel Web Analytics, Vercel Speed Insights

03Strictly necessary cookies

Required to run the site and keep it secure — signing you in, keeping your session on the right organization, and remembering this cookie choice. They set no advertising or cross-site identifiers, so they stay on and cannot be switched off. Blocking them in your browser will break parts of the product.

Always active — these cannot be switched off.
Name	Type	Served by	Purpose	Retention
sb-<project>-auth-token	Cookie	Ciele (Supabase Auth)	Keeps you signed in to the console and identifies your session on each request.	1 year, refreshed while you stay active
active_org_id	Cookie	Ciele	Remembers which organization you are working in when you belong to more than one.	Session
sso_txn	Cookie	Ciele	Encrypted, single-use token that protects one sign-in exchange with your identity provider against replay.	10 minutes
sso_gate	Cookie	Ciele	Encrypted proof that you completed sign-in for an assistant that requires an account.	12 hours
cc_cookie	Cookie	Ciele	Stores the choice you make here: the categories you allowed, when you chose, and a random consent id. We also keep our own copy of that record on our servers so we can show what you agreed to — see “Our record of your choice” below.	182 days
theme	Local storage	Ciele	Remembers whether you chose the light or dark interface, so the page does not load in the wrong one. Set only because you asked for it, and holds no identifier.	Until you clear it
_vercel_jwt, __vercel_live_token	Cookie	Vercel (our hosting provider)	Controls access to protected and preview deployments. Set by our host on the deployments it guards, not on the public site.	Session

04Functional cookies

Remember optional choices and let an embedded Ciele assistant pick a conversation back up where you left it. Turning these off does not stop you using the site — an assistant will simply start fresh each time, and some layout choices will not stick.

Set only if you allow this category.
Name	Type	Served by	Purpose	Retention
ciele-visitor	Local storage	Ciele	A random id that lets an embedded assistant keep one conversation continuous across page loads. Not linked to an account and not used to profile you or track you across other sites.	Until you clear it
preview-panel-collapsed	Local storage	Ciele	Remembers whether you collapsed the assistant preview panel in the console, so it opens the way you left it.	Until you clear it
ciele.local-connector., ciele.preview.ai-preferences.	Local storage	Ciele	If you pair a local connector, keeps that pairing and its preview model preferences on this device so you do not have to set them up again. Only written once you use that feature.	Until you clear it

05Analytics cookies

Let us count visits and measure page performance so we can see which pages matter and what is slow. The measurements are aggregated and we cannot use them to identify you. With these off we simply do not receive the measurement.

Set only if you allow this category.
Name	Type	Served by	Purpose	Retention
No cookie set	Cookie	Vercel Web Analytics	Counts page views and referrers in aggregate. Cookieless by design — it stores nothing on your device — but we still ask first and load it only if you allow this category.	Not stored on your device
No cookie set	Cookie	Vercel Speed Insights	Reports anonymous page-performance timings (such as how long a page took to become usable) so we can fix slow pages.	Not stored on your device

06What we do not do

We set no advertising cookies and run no advertising or cross-site tracking pixels. That is why this notice has no “marketing” category — there is nothing to disclose. If that ever changes, this notice and the consent banner will change with it, and we will ask you again before setting anything.
We do not sell personal data, and we do not share it for cross-context behavioural advertising.
We do not use the conversations that flow through our customers' assistants to train foundation models.

Where an organization publishes an assistant with Ciele on its own site, that organization decides what cookies its site sets and is responsible for asking its own visitors. Our banner deliberately does not appear inside an embedded assistant, because that consent is the host site's to collect.

07How to control your cookies

You can change or withdraw your choice at any time, and it is no harder than making it in the first place — open and switch any category off. The same link sits in the footer of every page on this site. Withdrawing consent stops the affected scripts immediately and clears the storage that category had set.

We remember your choice for 182 days and then ask again, and we ask again sooner if we start using cookies in a materially different way. Alongside your choice we store when you made it and a random consent id, which is the record we rely on to show what you agreed to.

Controlling cookies in your browser

Every major browser also lets you block or delete cookies for a site, independently of us. You will still be able to read this site, but blocking strictly necessary cookies will stop you signing in and will break parts of the product. How to do it differs by browser, so check its help pages — the settings are usually under Privacy.

Because we serve no advertising cookies, there is nothing here to opt out of through the industry ad-choice tools. If you want to check what other sites are doing, the usual directories are optout.aboutads.info and youronlinechoices.com.

08Our record of your choice

Data protection law requires us to be able to demonstrate that you consented, not merely to assert it. The cookie on your device is not enough for that on its own — it is yours, and you can clear it at any time — so when you make or change a choice we also store a record of it on our servers.

What one consent record contains.
Field	What it holds
Consent id	The same random id held in your cookie. It is what ties the record to your choice. It is not your name, not an account, and it changes if you clear your cookies.
Your choice	Which categories you allowed and which you refused, and whether you accepted everything, refused everything, or picked individually.
Notice version	Which version of this notice you were shown — consent to an older version does not evidence consent to a newer one.
When	The time you chose, and the time we stored it.
Where	The page you were on, reduced to the site address and path. Anything after the “?” or “#” is discarded before storage, because those can carry search terms or tokens the record does not need.
Browser	The browser identification string your browser sends, for context.

We do not store your IP address with the record. The consent id already links it to your browser, and an IP address would add identifying data this record does not need.

Each decision is added as a new entry rather than overwriting the last, so withdrawing consent is itself recorded — that history is what makes the record meaningful. We keep these entries for as long as we may need to evidence the choice, and no longer. Our legal basis is our legitimate interest in meeting the accountability duty the law places on us, not your consent — so this record exists whether you accept or refuse, and refusing everything still produces one.

09Your rights

Where cookies involve personal data, the rights in our Privacy Policy apply: you can ask for access, correction, deletion or a copy of your data, object to or restrict certain processing, and withdraw consent. Withdrawing consent does not affect processing that already happened while it was valid, and you will not be treated differently for exercising any of these rights.

If you are in the European Economic Area, the United Kingdom or Switzerland, you can also complain to your local data protection authority.

10Changes to this notice

We will update this notice when the cookies we use change, or for operational, legal or regulatory reasons. The date at the top of the page tells you when it last changed. When a change is material we do not rely on you noticing — we reset the consent banner so everyone is asked again.

11Where to get more information

For anything about our use of cookies, email us at privacy@ciele.app. For how we handle personal data more generally, see our Privacy Policy.