Ordinary browsing
Our public pages do not use cookies to identify or track visitors. Some page controls may temporarily remember a choice while you are using the page, but this information is not retained after the page is closed or reloaded.
Cookies and Storage Technologies
Aletheia uses only the cookies and similar technologies needed to provide, protect and secure its services.
We do not currently use analytics, advertising, marketing cookies or cross-site tracking.
Public website
Contact form
When you submit the Contact form, Aletheia uses a short-lived security cookie called aletheia_preauth_csrf to protect the request and help prevent misuse or duplicate submissions. It expires within 15 minutes and is not used for tracking.
Website assets
Aletheia's public website uses self-hosted styles, scripts, images and fonts. We do not currently use third-party analytics, advertising scripts, tracking pixels, social-media plugins or embedded marketing content.
Client Access and Ground Control
Request security
The aletheia_preauth_csrf cookie is also used to protect registration, verification, sign-in, recovery and passkey requests. It expires within 15 minutes.
Signed-in sessions
When you sign in, Aletheia uses an opaque session cookie called aletheia_session to keep you securely signed in.
For Client Access, a trusted session can remain active for up to 30 days and will end earlier after seven days without use.
For Ground Control, a recognised session can remain active for up to 14 days. Additional identity verification may still be required for protected or sensitive actions.
You can end a session at any time by signing out. Sessions may also end sooner following recovery, revocation or security-related account changes.
Passkeys
A passkey is created only when you choose to set one up. Your private passkey remains with your device, browser or passkey provider. Aletheia receives only the public information needed to verify your identity.
Aletheia does not receive the fingerprint, face scan, PIN or other device credential you use to unlock your passkey.
Signed-in devices
Aletheia uses limited browser and session information to help you recognise and manage devices signed in to your account and to help protect the service from misuse.
This information is not used for advertising, behavioural analytics or cross-site tracking.
Your choices
Aletheia currently uses no optional analytics, advertising or marketing technologies requiring a cookie-consent choice.
The security and session technologies described above are needed to provide the services you request, so they cannot be switched off while using Client Access or Ground Control.
You can manage your account security at any time by signing out, reviewing signed-in devices, revoking sessions or removing passkeys.
Future changes
We will review this notice before introducing any new storage or access technology or using an existing technology for a new purpose.
If we introduce technology that requires your consent, it will not be used until an appropriate choice has been provided.