Cookie Policy

Recruiter1 uses only essential cookies required for authentication, session management, and security. We do not use analytics cookies, advertising cookies, social media cookies, or any third-party tracking cookies.

Because we do not use non-essential cookies, no cookie consent banner is displayed. This policy describes the specific cookies we set and their purposes.

All cookies set by Recruiter1 are categorized as essential:

• Session tokens: HttpOnly, SameSite=Lax cookies that authenticate your session after login. These are required for account access and are deleted when you log out or the session expires.
• CSRF tokens: An HttpOnly cookie containing the server-side CSRF token, paired with a separate non-HttpOnly signing cookie that allows the client to attach the token as a request header for double-submit verification. These prevent cross-site request forgery on state-changing requests.
• Share portal access tokens: HttpOnly cookies (Share VID, Share CAP, Share Trust Session) that authorize access to candidate portals shared by agencies. Max age: 30 days. These allow hiring managers to view shared candidate information without creating a full account.
• Redirect cookies: HttpOnly cookie that stores the intended destination path after authentication completes. Cleared immediately after redirect.

Recruiter1 does not use any of the following:

• Google Analytics, Google Tag Manager, or any Google tracking cookies
• Meta Pixel, LinkedIn Insight Tag, or social media tracking pixels
• PostHog, Plausible, Fathom, Amplitude, Mixpanel, or any analytics SDK cookies
• Hotjar, Clarity, or session recording cookies
• Advertising cookies (Google Ads, Meta Ads, etc.)
• Third-party cookies of any kind

All platform analytics are collected via our first-party API and stored in our caching layer, not via cookies. See our Privacy Policy Section 08 for details on platform analytics.

We use localStorage for non-sensitive UI preferences:

• Theme preference (light/dark mode) — stores your selected theme
• Chat draft state — stores in-progress messages locally to prevent data loss

localStorage is not a cookie and is not sent to our servers with each request. You can clear localStorage at any time through your browser settings.

Since all cookies we use are essential for the functioning of the Service, they cannot be disabled without breaking core functionality (login, session management, portal access). If you wish to clear all cookies, you can do so through your browser settings. Note that this will log you out and may require re-authentication.

Global Privacy Control (GPC): We honor GPC signals. Since we do not sell or share personal data and do not use non-essential cookies, GPC has no effect on your Service experience.

If we add non-essential cookies in the future, we will update this policy, provide a cookie consent mechanism, and notify users in accordance with our Privacy Policy update procedures.

Questions about this Cookie Policy? Contact us at [email protected].