CerebrOS Cookie Notice
Effective October 22, 2026
Version: 2
This notice explains the cookies and similar browser storage that CerebrOS uses. It supplements our Privacy Policy. The tables list what a browser check of each site found on October 20, 2026, plus what the Console sets after sign-in and on the door screen.
The short version
- We use only what is needed to run the Service: to sign Console users in, to keep checkout secure, and to let door devices work offline.
- We do not use advertising cookies, tracking pixels, or analytics services.
- We do not track you across other websites.
- Because everything listed here is strictly necessary, we do not show a cookie banner. Blocking these cookies may stop parts of the Service from working.
What we use, by site
Ticket pages and checkout (tickets.cerebrosai.com and Operator domains)
Ticket pages load Stripe's script when they open, so Stripe can check for fraud before and during payment.
| Name | Set by | Type | Purpose | Lasts |
|---|---|---|---|---|
__stripe_mid | Stripe | Cookie, on the ticket site | Fraud prevention. Set when the ticket page loads Stripe's script. | 1 year |
__stripe_sid | Stripe | Cookie, on the ticket site | Fraud prevention for the current visit | 30 minutes |
m | Stripe | Cookie, on m.stripe.com | Fraud prevention, under Stripe's cookie policy | Up to 400 days |
Other cookies on *.stripe.com and *.stripe.network | Stripe | Cookie | Run the embedded payment fields and fraud checks, under Stripe's cookie policy | Set by Stripe |
CerebrOS itself sets no cookies on ticket pages. Buyers are never signed in.
Console (app.cerebrosai.com)
The sign-in page sets these before you sign in:
| Name | Set by | Type | Purpose | Lasts |
|---|---|---|---|---|
__client | Clerk | Cookie, on clerk.cerebrosai.com | Manages your sign-in session securely | Up to 400 days |
__client_uat and __client_uat_ followed by a short code | Clerk | Cookie, on cerebrosai.com and its subdomains | Tells the Console whether you are signed in. Holds a time stamp, not your account details. | Up to 400 days |
__cf_bm | Cloudflare, for Clerk | Cookie, on Clerk's sign-in and image domains | Tells people from bots, to protect sign-in | 30 minutes |
_cfuvid | Cloudflare, for Clerk | Cookie, on clerk.cerebrosai.com | Rate limiting, to protect sign-in | Until you close the browser |
__clerk_environment | Clerk | localStorage | Caches the sign-in settings | Until browser data is cleared |
After you sign in:
| Name | Set by | Type | Purpose | Lasts |
|---|---|---|---|---|
__session | Clerk | Cookie | Keeps you signed in | Short-lived, refreshed while you are active |
| Google Maps scripts | Script, may set or read storage | Address suggestions when you type a venue or business address. Loads only when you click into an address field. | Set by Google | |
Cookies on *.stripe.com | Stripe | Cookie | Stripe-hosted onboarding and billing pages, which open on Stripe's own site | Set by Stripe |
Door check-in screen (Console, on staff devices)
| Name | Type | Purpose | Lasts |
|---|---|---|---|
cerebros-door | IndexedDB (browser database) | Lets door staff keep scanning when the connection drops. Holds the event's guest list (ticket holder and buyer names, ticket types and ticket codes in scrambled, hashed form) and any scans waiting to upload. Never holds the ticket codes themselves. | Until the list is refreshed or browser data is cleared |
cerebros-door: followed by a setting name | localStorage | Device preferences, such as sound on or off and the device name | Until browser data is cleared |
cerebrosai.com (public site)
The public site sets no cookies and no browser storage. If you have opened the Console sign-in in the same browser, Clerk's __client_uat cookies are also sent to cerebrosai.com, because they are set for all of cerebrosai.com. The site does not read them.
The site counts page views and button clicks anonymously. The count uses no cookie and no browser storage, and stores no IP address or visitor ID. Browsers that send Global Privacy Control or Do Not Track are not counted.
Fonts on every site
Our pages load typefaces from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). Your browser requests them from Google, which receives your IP address and browser information. Google Fonts sets no cookies.
Global Privacy Control and Do Not Track
We honor Global Privacy Control as an opt-out of sale and sharing (Privacy Policy §12). We do not sell or share, so it changes nothing about your information today. We do not track you across sites. Our public site does not count a visit from a browser that sends Global Privacy Control or Do Not Track.
Your choices
You can block or delete cookies in your browser settings. If you block Stripe's cookies, checkout may not work. If you block Clerk's cookies, you cannot sign in to the Console. If door storage is blocked, the door screen still works online but cannot work offline.
Changes
If we ever add a cookie that is not strictly necessary, such as analytics or advertising, we will update this notice first and ask for any consent the law requires before setting it.
Contact
privacy@cerebrosai.com
Creative Code Collective Labs LLC, doing business as CerebrOS AI, 3631 Truxel Road #1272, Sacramento, CA 95834.