Website: https://ozeaon.com
Controller: Ozeaon OÜ (Registry Code 17484775)
Registered address: Tornimäe tn 5, 10145 Tallinn, Kesklinna linnaosa, Harju maakond, Estonia
Contact: privacy@ozeaon.com
1. Introduction
This Cookie Policy explains how Ozeaon uses cookies, local storage, analytics technologies, and similar tools across its digital presence. Ozeaon currently operates two systems: the public marketing website at ozeaon.com, and the authenticated platform at app.ozeaon.com. This policy covers cookies and similar technologies used on both, and notes where a technology is specific to one system.
Ozeaon uses a consent-based cookie model. Strictly Necessary technologies operate the website and platform and remember consent choices. Functional and Analytics technologies are disabled by default and are only activated if a user opts in. On app.ozeaon.com specifically, technologies strictly necessary to keep a signed-in user authenticated and to secure the platform are treated the same way as Strictly Necessary technologies on ozeaon.com — see Section 4.
Ozeaon does not currently use advertising cookies, retargeting pixels, behavioural advertising tools, or third-party marketing tracking technologies, so this policy does not currently include a Marketing cookie category. If that changes, this policy will be updated first — see Section 7.
2. What Cookies and Similar Technologies Are
Cookies are small text files placed on a device when a user visits a website. They help websites operate, remember preferences, measure usage, improve performance, and provide additional functionality.
"Similar technologies" includes local storage, session storage, tags, pixels, scripts, and analytics identifiers. Throughout this policy, "cookies" refers to cookies and similar technologies unless stated otherwise. On app.ozeaon.com, this includes the local storage or cookie mechanism used to keep a user signed in between visits.
3. Current Cookie Categories
Ozeaon currently uses three cookie categories, applied across ozeaon.com and app.ozeaon.com:
- Strictly Necessary — always active
- Functional — optional, off by default
- Analytics — optional, off by default
Users choose which optional categories to allow through the cookie banner or the preferences panel at any time. Analytics on app.ozeaon.com, if introduced, will be added to this policy before activation, consistent with Section 14.
4. Strictly Necessary Cookies
Strictly Necessary cookies and equivalent technologies are required for the website and platform to function and cannot be switched off. They support:
- website and platform operation and security
- page and application delivery
- remembering cookie consent choices
- preventing the cookie banner from reappearing after a choice has been made
- basic technical functionality required to provide the website
- on app.ozeaon.com: keeping a signed-in user authenticated between requests (via Supabase Auth session storage) and Cloudflare's security and bot-management technology, which protects the platform from abuse
Because these are necessary to provide the service a user has requested, they do not require opt-in consent under applicable law.
5. Functional Cookies
Functional cookies help improve the website experience by remembering optional preferences, such as:
- language settings
- interface preferences
- optional personalisation settings
- a more consistent experience across visits
Functional consent is connected to Google Consent Mode v2 signals for functionality_storage and personalization_storage. Both are set to denied before Google Analytics loads, and only change to granted if a user opts in.
The website remains fully usable if Functional cookies are declined.
6. Analytics Cookies
Analytics cookies help Ozeaon understand how the ozeaon.com website is used and where it can be improved, through Google Analytics 4 via Google Consent Mode. analytics_storage is denied by default and only changes to granted on opt-in.
Analytics may help Ozeaon understand:
- which pages are visited and how users move through the site
- which forms are successfully submitted
- which language options are selected
- which content areas attract interest
- general website performance and engagement
Analytics events are configured not to collect personally identifiable information. Ozeaon does not currently run Google Analytics on app.ozeaon.com; if analytics tooling is introduced for the platform, this Cookie Policy will be updated first, consistent with Section 14.
7. Marketing and Advertising
Ozeaon does not currently use cookies for behavioural advertising, ad retargeting, cross-site advertising profiles, third-party advertising audiences, marketing pixels, or ad conversion tracking, and does not currently include a Marketing cookie category. If Ozeaon introduces advertising, retargeting, or marketing measurement tools in the future, this Cookie Policy and the cookie banner will be updated before those tools are activated, and renewed consent may be requested.
8. Consent by Default
Before a user makes a cookie choice:
| Storage signal | Default state |
|---|---|
| Strictly Necessary | Active |
| Functional storage | Denied |
| Personalization storage | Denied |
| Analytics storage | Denied |
Advertising-related storage is not used at all, since Ozeaon does not currently run advertising or retargeting technology. Optional cookies are only activated after consent is given. On app.ozeaon.com, the authentication session and Cloudflare security technologies described in Section 4 remain active regardless of the user's Functional or Analytics choices, as they are necessary to provide the signed-in service.
9. Google Consent Mode v2
Ozeaon uses Google Consent Mode v2 on ozeaon.com so that Google Analytics respects each user's cookie choices.
- Functional category →
functionality_storage,personalization_storage - Analytics category →
analytics_storage
Signals default to denied and switch to granted only when the corresponding category is accepted. Analytics and preference-related functionality are therefore controlled entirely by the user's selected preferences.
10. International Data Transfers
Where Analytics consent is given on ozeaon.com, limited usage data is processed by Google, which may involve transferring data outside the European Economic Area. Google provides safeguards for such transfers, including its EU-US Data Privacy Framework certification and/or Standard Contractual Clauses, as applicable under Google's own terms. No such transfer occurs unless Analytics consent has been granted.
On app.ozeaon.com, the Strictly Necessary authentication and security technologies described in Section 4 are provided by Supabase and Cloudflare respectively, both of which may process data outside the European Economic Area, the United Kingdom, or Switzerland. Because these technologies are necessary to provide the signed-in service, they do not depend on optional consent; the international transfer safeguards Ozeaon relies on for these providers are described in Ozeaon's Privacy Policy.
11. Consent Storage and Versioning
Ozeaon stores each user's cookie preference record locally in their browser. The current record is stored under consent model version 2, and includes:
- necessary
- functional
- analytics
Strictly Necessary is always enabled; Functional and Analytics reflect the user's actual selections. Version 2 reflects the current three-category structure, replacing an earlier two-category model. When the consent structure changes materially again — for example, if a distinct consent record is introduced for app.ozeaon.com — the version number will be updated and users may be asked to review their preferences again.
On app.ozeaon.com, preferences are stored in a separate cookie, oz_cookie_consent, under its own consent model version 1, recording the Strictly Necessary and Functional categories and the time the choice was saved.
12. Managing Your Preferences
On this website: Users can accept all optional cookies, reject them, enable Functional or Analytics cookies individually, or change or withdraw consent at any time via the Cookie Settings link in the site footer. Strictly Necessary technologies remain active regardless of choice, as they are required for the website and consent system to function.
On app.ozeaon.com: The authentication session and platform security technologies described in Section 4 remain active for the platform to function while a user is signed in; a user can end their session at any time by signing out.
In your browser: Most browsers also let users block or delete cookies directly through browser settings, independently of this site's preference panel. Doing so may affect Functional or Analytics features, or a signed-in session on app.ozeaon.com, but will not affect core site functionality.
13. Current Google Analytics Events
Google Analytics 4 is used on ozeaon.com for limited, consent-gated analytics. All events route through the website's analytics helper and respect the user's Analytics consent choice. Ozeaon does not send names, email addresses, phone numbers, message content, or other directly identifying form data to Google Analytics.
join_waitlist— fires when a user successfully submits an early access or waitlist form, via the shareduseEarlyAccessFormhook (hero, footer, and Get Started forms). May include selected interest tags; excludes personally identifying data.select_language— fires when a user selects a language from the desktop or mobile language picker. May includelanguage: "JA"andlanguage_name: "日本語"-style values, as applicable.
This helps Ozeaon understand language interest and plan multilingual support.
14. Future Analytics Events
Future analytics events (e.g. scroll-depth or outbound-click tracking on ozeaon.com, or any analytics introduced on app.ozeaon.com) will route through an equivalent analytics helper and consent model, and will not send personally identifiable information unless a separate legal basis, technical configuration, and user notice are put in place first. Material changes to optional cookie or analytics use will trigger an update to this policy and may prompt renewed consent.
15. Current Cookie Table
The app.ozeaon.com rows below reflect a technical audit of the live platform conducted 23 September 2026; the ozeaon.com rows reflect the standard configuration of each technology and have not yet been independently audited in the same way. Ozeaon reviews this table periodically against its live implementation and updates it if actual values differ from those shown.
| Category | Technology | Provider | Purpose | Consent Required | Duration |
|---|---|---|---|---|---|
| Strictly Necessary | Consent preference storage (ozeaon_consent) | Ozeaon | Stores cookie preferences on ozeaon.com under consent model version 2 | No | Until preferences change, browser storage is cleared, or the model is updated |
| Strictly Necessary | Consent preference cookie (oz_cookie_consent) | Ozeaon | Stores cookie preferences on app.ozeaon.com under consent model version 1 | No | 1 year, or until preferences change |
| Strictly Necessary | Edge/session security | Vercel | Supports secure, reliable delivery on ozeaon.com | No | Session |
| Strictly Necessary | Authentication session | Supabase | Keeps a user signed in on app.ozeaon.com | No | 400 days or until logout; the access token inside it expires after 1 hour and renews automatically, and the session itself has no inactivity timeout |
| Strictly Necessary | Sign-in verification | Supabase | Secures email confirmation and password-reset links on app.ozeaon.com | No | Deleted when the link is used; otherwise up to 400 days (the link itself expires after 1 hour) |
| Strictly Necessary | Active account | Ozeaon | Remembers whether a user is acting as themselves or on behalf of an organisation they manage | No | 30 days, or until logout |
| Strictly Necessary | Clearance token (cf_clearance) | Cloudflare | Confirms a passed security challenge on app.ozeaon.com; set only if a challenge is shown | No | Set by the zone's Challenge Passage setting (Cloudflare default: 30 minutes) |
| Strictly Necessary | Image upload storage | Ozeaon | Holds images on the user's device while an article is being edited, until they upload — necessary to complete the specific editing action in progress | No | Until the upload completes or the editor is closed |
| Functional | Sidebar layout | Ozeaon | Remembers whether the user left the sidebar open or closed | Yes | 1 year |
| Functional | Language / preference storage (ozeaon_prefs) | Ozeaon | Stores opted-in language or personalisation preferences | Yes | 12 months |
| Analytics | GA4 client identifier (_ga) | Aggregate usage analytics on ozeaon.com, opt-in only | Yes | 2 years | |
| Analytics | GA4 session identifier (_ga_<container-id>) | Aggregate usage analytics on ozeaon.com, opt-in only | Yes | 2 years |
16. Cookie Banner Copy
We use strictly necessary cookies to run the site, and — only with your consent — functional cookies to remember preferences like your language, and analytics cookies to understand how it's used so we can improve it. You can accept, reject, or choose what to allow. See our [Cookie Policy].
17. Cookie Preferences Panel Copy
Choose which cookies to allow. Strictly necessary cookies are always on. See our [Cookie Policy].
- Strictly Necessary — Required for core features like security, navigation, keeping you signed in on app.ozeaon.com, and remembering your cookie choice. Status: Always active
- Functional — Remembers your preferences, such as your chosen language, so the site works the way you left it. Status: Optional
- Analytics — Google Analytics helps us understand aggregate, anonymised usage on ozeaon.com so we can improve the site. No analytics run without your consent. Status: Optional
Buttons: Reject all · Save preferences · Accept all
18. Related Policies
This Cookie Policy should be read together with Ozeaon's Privacy Policy, which explains the wider legal basis, retention, and data-sharing detail behind the cookie and consent practices described here, including the third-party providers referenced in Sections 4 and 10.
19. Changes to This Cookie Policy
Ozeaon may update this policy if it changes cookie categories, adds analytics events or third-party services, changes Google Analytics configuration, introduces analytics on app.ozeaon.com, adds marketing or retargeting technologies, changes the consent model, or changes cookie durations or storage methods. Where changes are material, renewed consent may be requested — the versioned consent model exists to support exactly this.
20. Contact
Questions about this Cookie Policy or Ozeaon's use of cookies: privacy@ozeaon.com