---
title: Cookie Policy · Aeonav
description: How Aeonav uses cookies and browser storage.
canonical: https://www.aeonav.fivecoder.com/legal/cookies
updated: "2026-11-09"
---

[/ Legal](http://www.aeonav.fivecoder.com/legal)

# Cookie Policy

Last updated November 9, 2026

> **Publication status.** This is Aeonav's operational cookie baseline. Aeonav is operated by the Fivecoder team. The final cookie inventory and the production analytics and advertising configuration must be verified against the deployed site before paid commercial launch.

This policy explains how Aeonav uses cookies, `localStorage`, `sessionStorage`, and similar technologies on our websites and in the product. It supplements the [Privacy Policy](http://www.aeonav.fivecoder.com/legal/privacy).

"Cookies" is used broadly here to include browser storage and similar technologies that read or store information on your device.

## [Current approach](#current-approach)Copy Anchor Link

- Strictly necessary storage is used for sign-in, security, consent preferences, and basic site operation.
- Optional analytics, session replay, and advertising tools must not be described as active unless the deployed service is actually configured to use them.
- Where consent is required, optional tools should not run before the required choice is recorded.
- You can reopen the consent control from the service where available.
- Blocking strictly necessary cookies may prevent sign-in or other core features from working.

The application currently uses a local preference key named `elmo.cookie-consent`. That name is retained for compatibility with the upstream Elmo codebase and does not mean that Aeonav is operated by Elmo.

## [Strictly necessary](#strictly-necessary)Copy Anchor Link

These technologies support core operation and security. They are not used for advertising.

| Technology                              | Purpose                              | Typical lifetime          |
| --------------------------------------- | ------------------------------------ | ------------------------- |
| Session and authentication cookies      | Keep a signed-in session secure      | Session or until sign-out |
| CSRF and callback state                 | Protect sign-in and form submissions | Short-lived               |
| `elmo.cookie-consent` in `localStorage` | Remember the cookie choice           | Until cleared             |
| Security and load-balancing storage     | Route requests and mitigate abuse    | Session or short-lived    |
| Error correlation storage               | Connect errors from the same visit   | Until the tab closes      |

The exact cookie names and hostnames can vary by authentication, hosting, and proxy configuration. The deployed service must be inspected to produce a final host-specific inventory.

## [Optional analytics and diagnostics](#optional-analytics-and-diagnostics)Copy Anchor Link

Aeonav may use analytics, product telemetry, error monitoring, or session replay where enabled and permitted. Based on the current codebase, the following categories may be present:

| Category          | Purpose                                    |
| ----------------- | ------------------------------------------ |
| Web analytics     | Aggregate page views and referrers         |
| Product analytics | Understand feature use and product flows   |
| Error monitoring  | Diagnose errors and reliability problems   |
| Session analytics | Understand interaction and replay sessions |

The presence of code or configuration support does not mean any optional tool is enabled in production. The final list of active providers, cookie names, storage keys, and lifetimes must be verified from the deployed environment and added to the [Subprocessors](http://www.aeonav.fivecoder.com/legal/subprocessors) page.

## [Advertising](#advertising)Copy Anchor Link

The codebase can support advertising and conversion tags. A final advertising inventory has not been confirmed for Aeonav production.

If advertising tags are enabled, this policy must identify:

- the active advertising platforms;
- the cookie names and storage keys they set;
- the purpose and lifetime of each item;
- whether a hashed email address or other conversion data is sent; and
- how consent is obtained and withdrawn.

Do not assume that every advertising provider supported by the upstream Elmo codebase is active for Aeonav.

> **Pending confirmation: advertising inventory.** No advertising platform is represented as active in this baseline.

## [Third-party embeds](#third-party-embeds)Copy Anchor Link

Pages may embed third-party content such as video, documentation, or support chat. Those services can set their own storage when loaded or when you interact with them. The deployed site must be checked before a complete third-party embed list is published.

## [Managing cookies](#managing-cookies)Copy Anchor Link

Use the cookie preferences control in the service where available. You can also block or delete cookies and site storage in your browser. Blocking necessary storage can prevent sign-in.

Where applicable law grants a right to withdraw consent or object to processing, email <support@fivecoder.com>.

## [Contact](#contact)Copy Anchor Link

Questions about cookies or privacy can be sent to <support@fivecoder.com>.

> **Pending confirmation: cookie inventory.** The final production cookie table, consent-region behavior, analytics configuration, advertising configuration, and retention periods must be verified before paid commercial launch.

---

_This baseline is adapted from the [Basecamp open-source policies](https://github.com/basecamp/policies) under [CC BY 4.0](https://creativecommons.org/licenses/by/4.0/), with substantial modifications for Aeonav._

## Other policies

- [Terms of Service](http://www.aeonav.fivecoder.com/legal/terms)
- [Privacy Policy](http://www.aeonav.fivecoder.com/legal/privacy)
- [Subprocessors](http://www.aeonav.fivecoder.com/legal/subprocessors)
- [Acceptable Use](http://www.aeonav.fivecoder.com/legal/acceptable-use)