Back to Home

Cookie Policy

Last Updated: January 2026

Introduction

This Cookie Policy explains how Canopy Nexus Ltd, trading as Where On Earth ("we", "us", "our"), uses cookies and similar technologies on whereonearth.net, including our corporate website, customer dashboard, and onboarding application.

By using our website and services, you consent to the use of cookies as described in this policy.

What Are Cookies?

Cookies are small text files that are stored on your device (computer, tablet, or mobile) when you visit a website. They help websites remember information about your visit, making it easier to use the site and ensuring it works properly.

Cookies can be "persistent" (remain on your device until deleted or expired) or "session" (deleted when you close your browser).

How We Use Cookies

We use cookies for two primary purposes:

1. Corporate Website (whereonearth.net)

On our public-facing corporate website, we use cookies solely for analytics purposes to help us understand how visitors interact with our site. This helps us improve the user experience and the quality of our content.

Important: Analytics data collected from our corporate website is:

  • Used only for internal analysis and website improvement
  • Never sold or disclosed to third parties
  • Anonymized and aggregated wherever possible
  • Retained only for as long as necessary for analysis

2. Customer Dashboard and Onboarding Application

Our customer dashboard and onboarding application use cookies that are essential for the service to function properly. These cookies:

  • Maintain your login session so you don't have to re-authenticate on every page
  • Remember your preferences and settings within the application
  • Store temporary data during the onboarding process
  • Ensure security and prevent unauthorized access
  • Enable core functionality of the service

These cookies are strictly necessary for the service to work and cannot be disabled if you wish to use the platform.

Types of Cookies We Use

Strictly Necessary Cookies

These cookies are essential for our services to function. They enable you to log in, navigate the dashboard, and use the features you've subscribed to.

Examples:

  • Session authentication tokens
  • Security tokens to prevent cross-site request forgery (CSRF)
  • Load balancing cookies to distribute traffic efficiently

Duration: Typically session-based (deleted when you close your browser) or short-term persistent cookies

Analytics Cookies (Corporate Website Only)

These cookies help us understand how visitors use our website by collecting anonymous information about page visits, time spent on pages, and navigation patterns.

Examples:

  • Page view tracking
  • User journey analysis
  • Performance monitoring

Duration: Typically 12-24 months

Data handling: All analytics data is:

  • Processed and stored in-house
  • Never shared with advertising networks or third parties
  • Anonymized and cannot identify individual users
  • Used solely for improving our website and content

Cookies We Do NOT Use

We want to be clear about what we don't do:

  • No advertising cookies – We don't use cookies for targeted advertising
  • No third-party tracking – We don't allow third-party advertising networks to track you
  • No cross-site tracking – We don't track your activity across other websites
  • No social media tracking – We don't use social media tracking pixels
  • No data selling – We never sell cookie data or analytics to third parties

Managing Your Cookie Preferences

Corporate Website

You can manage your analytics cookie preferences in several ways:

Browser settings: Most browsers allow you to:

  • View and delete cookies
  • Block all cookies
  • Block third-party cookies only
  • Clear cookies when you close your browser

Instructions for popular browsers:

ChromeFirefoxSafariEdge

Do Not Track (DNT): We respect browser DNT signals. If your browser sends a DNT signal, we will not use analytics cookies.

Opt-out: You can opt out of analytics cookies by adjusting your preferences in the cookie banner that appears on your first visit, or by using the cookie settings link in our website footer.

Customer Dashboard

Because the cookies used in the customer dashboard and onboarding application are strictly necessary for the service to function, they cannot be disabled while using the platform. These cookies are essential for:

  • Keeping you logged in
  • Protecting your account security
  • Providing the service you've subscribed to

If you disable these cookies, you will not be able to use the dashboard or access your account.

Third-Party Services

While we do not use third-party advertising or tracking cookies, our service may interact with third-party services that have their own cookie policies:

Stripe (Payment Processing): Our payment processor uses cookies to process payments securely. See Stripe's Cookie Policy for details.

Your Rights

Under UK GDPR and data protection laws, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to processing of your data
  • Request data portability

For more information about your data protection rights, please see our Privacy Policy.

Changes to This Policy

We may update this Cookie Policy from time to time to reflect changes in our practices or for legal or regulatory reasons. We will notify you of any material changes by posting the updated policy on this page with a new "Last Updated" date.

We encourage you to review this policy periodically to stay informed about how we use cookies.

Technical Details for Developers

For developers integrating with our API or wanting technical details:

Cookie names and purposes:

session_id – Authentication session identifier
(HttpOnly, Secure, SameSite=Lax)
csrf_token – Cross-site request forgery protection
(Secure, SameSite=Strict)
analytics_consent – Records your analytics cookie preference
(12 months)
_analytics_session – Anonymous analytics session
(Corporate site only, 30 minutes)

Security attributes:

  • All authentication cookies use HttpOnly flag (not accessible via JavaScript)
  • All cookies use Secure flag (transmitted only over HTTPS)
  • Appropriate SameSite attributes to prevent CSRF attacks

Contact Us

If you have questions about our use of cookies, please contact us:

Email: privacy@whereonearth.net

General inquiries: support@whereonearth.net

Quick Reference

Cookie TypePurposeDurationCan Be Disabled?
Session (Dashboard)Authentication & securitySession/Short-termNo – Required for service
Analytics (Website)Website improvement12-24 monthsYes – Via browser or preferences
CSRF ProtectionSecuritySessionNo – Required for service