Cookie Policy
This policy explains how HiringFleet uses cookies and similar technologies (such as browser local storage and session storage) when you visit our website and use our platform, and the choices you have. We refer to all of these technologies as “cookies” here.
1. What Are Cookies?
Cookies are small text files placed on your device when you visit a website. They are widely used to make sites work, remember your preferences, and give site owners information about usage. Browser local storage and session storage serve comparable purposes.
2. Categories of Cookies We Use
- Strictly necessary. Required for the platform to function: they keep you signed in, secure your session, and protect against fraud and abuse (for example, our CAPTCHA and rate-limiting protections). The site cannot work properly without them, so they do not require consent.
- Preferences (functional). Remember choices you make, such as light or dark mode, so your experience is consistent across visits.
- Analytics. Help us understand how the platform is used so we can improve it. These are set only with your consent, and the data is aggregated.
We do not use advertising, marketing, or cross-site tracking cookies, and we do not sell or share your information for behavioral advertising.
3. Third-Party Cookies
Some cookies are set by trusted third parties that power core features:
- Stripe - checkout is hosted on Stripe’s own domain. We do not load Stripe scripts on this site, so no Stripe cookie is set here; anything Stripe sets during checkout is covered by Stripe’s own notice.
- Cloudflare Turnstile - bot protection on sign-up and public forms.
- PostHog - consent-based product analytics (only after you accept analytics).
- Google Analytics - consent-based traffic analytics (only after you accept analytics).
- Plausible - privacy-friendly, aggregated web analytics that is cookieless: it sets no cookies and stores nothing on your device.
These providers operate under their own policies, for the limited purpose of delivering their service to you.
4. How to Control Cookies
- Cookie settings. Use the “Cookie settings” link in the footer of any page to accept or decline non-essential cookies, or to change a choice you made earlier. Withdrawing consent is as easy as giving it and does not affect your access to the platform.
- Global Privacy Control (GPC). We recognize the GPC browser signal: when your browser sends it, we automatically treat it as a decline of non-essential analytics.
- Browser controls. Most browsers let you view, block, or delete cookies in their settings. Blocking strictly necessary cookies may break core features like signing in.
- EU/UK visitors. We set non-essential cookies only after you give consent through our cookie banner.
5. Cookies We Use (Details)
| Cookie / Key | Provider | Category | Purpose | Duration |
|---|---|---|---|---|
| __Secure-authjs.session-token / __Host-authjs.session-token (renaming at the app-host split) | HiringFleet | Strictly necessary | Keeps you signed in | Up to 90 days. Signing out, or an inactivity window shorter than that (30 days normally, 8 hours for admin accounts), ends it sooner. |
| __Secure-authjs.csrf-token / __Host-authjs.csrf-token (renaming at the app-host split) | HiringFleet | Strictly necessary | Protects sign-in against cross-site request forgery | Session |
| __Secure-authjs.callback-url / __Host-authjs.callback-url (renaming at the app-host split) | HiringFleet | Strictly necessary | Returns you to the right page after sign-in | Session |
| hiringfleet-cookie-consent | HiringFleet | Strictly necessary | Remembers your cookie-consent choice (local storage) | Until cleared |
| hf:theme | HiringFleet | Preferences | Remembers light/dark mode (local storage) | Until cleared |
| utm_source / utm_medium / utm_campaign | HiringFleet | Analytics (consent) | Remembers which campaign brought you here | 30 days |
| ph_* | PostHog | Analytics (consent) | Aggregated product-usage measurement (local storage) | Until cleared |
| _ga / _ga_* | Google Analytics | Analytics (consent) | Distinguishes visitors for aggregated traffic measurement | Up to 2 years |
| cf_* | Cloudflare | Strictly necessary | Bot and abuse protection (Turnstile) | Per Cloudflare policy |
| (none - Plausible) | Plausible | Analytics | Cookieless aggregated web analytics; nothing stored on your device | n/a |
| remember-me | HiringFleet | Strictly necessary | Records that you chose to stay signed in | 90 days |
| __Secure-hf-login-2fa / __Host-hf-login-2fa (renaming at the app-host split) | HiringFleet | Strictly necessary | Remembers that this device passed two-factor sign-in | 90 days |
| __Secure-hf-totp-setup / __Host-hf-totp-setup (renaming at the app-host split) | HiringFleet | Strictly necessary | Proves an in-progress authenticator setup belongs to you | 15 minutes |
| __Secure-authjs.pkce.code_verifier / __Host-authjs.pkce.code_verifier (renaming at the app-host split) | HiringFleet | Strictly necessary | Secures the Google sign-in exchange | 15 minutes |
| __Secure-authjs.state, __Secure-authjs.nonce / __Host- forms (renaming at the app-host split) | HiringFleet | Strictly necessary | Protects the Google sign-in redirect against tampering | 15 minutes |
| __Secure-admin-step-up / __Host-admin-step-up (renaming at the app-host split) | HiringFleet (staff) | Strictly necessary | Proves a recent re-authentication before a sensitive admin action | 5 minutes |
| impersonate_target_id | HiringFleet (staff) | Strictly necessary | Marks an active, audited support session on an account | 1 hour |
| restore_admin_session | HiringFleet (staff) | Strictly necessary | Returns the administrator to their own account afterwards | 60 seconds |
6. Your Choices by Region
- EU / UK. Non-essential cookies are set only with your prior consent, which you can withdraw at any time via the footer's Cookie settings.
- United States (California and other states). We do not “sell” or “share” personal information for cross-context behavioral advertising, and we honor Global Privacy Control signals.
7. Changes to This Cookie Policy
We may update this policy to reflect changes in the cookies we use or in the law. When we do, we will revise the “Updated” date above and, for material changes, provide more prominent notice.
8. Related Policies & Contact
For a full description of the data we collect and your rights over it, see our Privacy Policy. Questions about cookies can be sent to privacy@hiringfleet.com.