2. Why We Use Cookies
We use cookies to:
- Keep you logged in and maintain your session securely.
- Remember your preferences (theme, language, consent choices).
- Understand how users interact with our platform so we can improve it.
- Detect and prevent fraudulent activity.
- Deliver relevant content and, where applicable, personalised ads.
We do not use cookies to build cross-site behavioural advertising profiles or sell cookie-derived data to third parties.
3. Cookie Categories & Consent
Under the GDPR and ePrivacy Directive (EU), and the Privacy and Electronic Communications Regulations (PECR, UK), we must obtain your prior informed consent before placing any cookies that are not strictly necessary for the operation of the Platform.
When you first visit CareerBrains, a cookie consent banner is displayed. You can choose to accept all cookies, accept only necessary cookies, or customise your preferences. You may change your choices at any time via the Cookie Settings link in the footer.
Strictly necessary cookies do not require consent; all other categories require it.
4. Strictly Necessary Cookies
These cookies are essential for the Platform to function and cannot be switched off. They are set in response to your actions (e.g., logging in, submitting a form). No consent is required under applicable law.
| Cookie Name | Purpose | Duration | Party |
|---|---|---|---|
| access_token | JWT access token for authenticated API requests | 30 minutes (in-memory) | First |
| refresh_token | JWT refresh token for re-issuing access tokens | 7 days (HttpOnly) | First |
| session_id | Server-side session identifier for OAuth flows | Session | First |
| csrf_token | Protects state-changing requests against CSRF attacks | Session | First |
| cookie_consent | Stores your cookie preference choices | 1 year | First |
5. Functional Cookies
Functional cookies enable enhanced functionality and personalisation. If you disable these, some features (such as remembered preferences) may not work as expected.
| Cookie Name | Purpose | Duration | Party |
|---|---|---|---|
| ui_theme | Remembers your light/dark theme preference | 1 year | First |
| lang_pref | Remembers your language preference | 1 year | First |
| onboarding_dismissed | Tracks dismissed onboarding tips | 6 months | First |
| recent_searches | Stores recent job search queries for quick access | 30 days | First |
6. Analytics Cookies
Analytics cookies help us understand how visitors use the Platform — which pages are most popular, where users encounter errors, and how they navigate the site. This data is collected in aggregate and used to improve the Platform. Consent is required.
| Cookie / Tool | Purpose | Duration | Party |
|---|---|---|---|
| _ga, _ga_* | Google Analytics — distinguishes users, tracks sessions and page views | 2 years / 1 day | Third (Google) |
| _gid | Google Analytics — stores and updates a unique value for each page visited | 24 hours | Third (Google) |
| plausible_ignore | Plausible Analytics opt-out flag (where configured) | Persistent | Third (Plausible) |
| internal_analytics | CareerBrains first-party event tracking (feature usage, error events) | 90 days | First |
Where we use Google Analytics, we have enabled IP anonymisation and data minimisation settings. We have entered into a Data Processing Agreement with Google.
7. Marketing & Advertising Cookies
We currently do not use third-party marketing or retargeting cookies on the Platform. If this changes, we will update this policy and obtain fresh consent before activating any such cookies.
If you arrive at CareerBrains via an affiliate link or campaign, we may set a first-party cookie to attribute your registration to the correct source. This cookie does not track you across other websites.
8. Third-Party Cookies
Third-party service providers embedded in our Platform may set their own cookies. We do not control these cookies. The key third-party providers whose cookies may be set are:
| Provider | Purpose | Privacy Policy |
|---|---|---|
| Google (OAuth) | Login via Google — session handling | policies.google.com/privacy |
| LinkedIn (OAuth) | Login via LinkedIn — session handling | linkedin.com/legal/privacy-policy |
| Stripe (payment) | Payment processing — fraud prevention, transaction tracking | stripe.com/privacy |
| Google Analytics | Usage analytics | policies.google.com/privacy |
We are not responsible for the content of third-party privacy policies. We encourage you to review them directly.
9. Managing Your Cookie Preferences
9.1 Cookie Settings on CareerBrains
You can update your cookie preferences at any time by clicking the Cookie Settings link in the footer. Changes take effect immediately. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
9.2 Browser Controls
All modern browsers allow you to control cookies through their settings. You can block all cookies, delete existing cookies, or allow only first-party cookies. Note that blocking strictly necessary cookies will prevent the Platform from functioning.
- Chrome: Settings → Privacy and security → Cookies and other site data
- Firefox: Settings → Privacy & Security → Cookies and Site Data
- Safari: Preferences → Privacy → Manage Website Data
- Edge: Settings → Cookies and site permissions
9.3 Opt-Out Tools
You can opt out of Google Analytics tracking across all websites using the Google Analytics Opt-Out Browser Add-on at tools.google.com/dlpage/gaoptout.
For general interest-based advertising opt-outs, visit the Network Advertising Initiative (optout.networkadvertising.org) or the Digital Advertising Alliance (optout.aboutads.info).
9.4 Mobile Devices
On mobile devices, you can control advertising identifiers through your device settings (iOS: Settings → Privacy → Tracking; Android: Settings → Google → Ads → Opt out of Ads Personalisation).
10. Do Not Track (DNT)
Some browsers include a “Do Not Track” (DNT) feature that signals to websites that you do not want your browsing activity tracked. There is currently no industry standard for responding to DNT signals. We do not alter our data collection practices in response to DNT signals at this time.
US state laws (Colorado, Connecticut) require us to honour opt-out signals from universal opt-out mechanisms (e.g., the Global Privacy Control, GPC). If we receive a verified GPC signal from a browser, we treat it as an opt-out of the “sale” or “sharing” of personal information for that session.
11. Updates to This Policy
We may update this Cookies Policy from time to time to reflect changes in the cookies we use, legal requirements, or our practices. We will update the “Last updated” date at the top of this page. For material changes, we will re-display the cookie consent banner to obtain fresh consent where required.
12. Contact
For questions about our use of cookies, contact our Data Protection Officer at dpo@CareerBrains.com or visit our Privacy Policy for full details on data processing.