Legal
Cookies
There is no banner on this site, and this page explains why rather than assuming you will take it on trust.
The public site sets no cookies. Not necessary ones, not functional ones, not analytics, not advertising. There is nothing to consent to, which is why you were not asked.
Under the Privacy and Electronic Communications Regulations, consent is required for storing or accessing information on a visitor’s device. The exception is storage strictly necessary to deliver a service the visitor asked for. We rely on that exemption for four items, each described in full below: two on the public site, and two set only when an invited reader signs in to a private investor area.
What is stored on your device
- Name
- censio.gate.v1
- Type
- Session storage
- Purpose
- Records that the entrance has already run, so it does not repeat on every page. censio.io and censi0.com each set it in their own browser storage.
- Contains
- The character 1
- Retained
- Until the tab is closed
Session storage, not a cookie: it is never transmitted with a request, so it cannot be read by us or by anyone else on the network.
The investor route only
- Name
- censio.investors.v1
- Type
- Session storage
- Purpose
- Keeps the steps you have completed on /investors so a refresh does not start you again
- Contains
- Your reference and the step you reached; never the statement's answers or signature
- Retained
- Until the tab is closed
The investor room only
- Name
- censio_deck
- Type
- Strictly necessary cookie (HttpOnly, Secure, SameSite=Lax)
- Purpose
- Keeps an invited reader signed in to the investor room
- Retained
- Seven days, or until you clear it
Set only after an invited reader signs in at /deck/login, sent only to /deck pages, and unreadable by the page's scripts.
What we do not do
No third-party analytics, no advertising or retargeting pixels, no cross-site identifiers, no fingerprinting, no session recording, and no social embeds that would set cookies on our behalf.
This is a deliberate constraint rather than a stage we have not reached yet. A company whose product is the record of an organisation's authority should not be assembling a shadow profile of the people reading about it.
What your browser can still see
Our hosting provider records request metadata in server logs — IP address, timestamp, path, user agent — for operational security. That is a server-side log rather than device storage, so it is outside the scope of this page and inside the scope of the privacy notice.
Fonts are served from this domain and not from a font network, so loading a page does not disclose your visit to a third party.
This page
- Version
- 1.2
- In force from
- 8 October 2026
- Contact
- hello@censio.io