Last updated: 7 September 2026

This Cookie Policy explains what we store on your device when you use recruiterlog.com and its subdomains, why, and how to turn off the parts that are optional. It forms part of our Privacy Policy.

What Is a Cookie?

A cookie is a small piece of data a site stores on your device and reads back on your next visit. It usually holds an identifier that lets the site recognise your browser, whatever data serves the cookie's purpose, and an expiry date.

Cookies set by the site you are visiting are first-party cookies. Cookies set by another company whose code runs on the page are third-party cookies, and those can follow you across other sites using the same service.

We also use two related browser technologies, and this policy covers both because they raise the same question for you. Local storage keeps a value in your browser until it is cleared, and unlike a cookie it is never sent to our servers. Tracking pixels are tiny requests to a third party that record that a page was loaded.

The Three Categories

Strictly necessary. Without these the site cannot do what you asked it to. They keep you signed in, keep a checkout safe, and stop cross-site request forgery. These cannot be switched off, and we do not ask for consent to set them, because the service does not function without them.

Functional. These remember a preference so you do not have to set it again. Nothing here identifies you or leaves your browser.

Analytics. These tell us which pages are used and where people give up, in aggregate. Optional.

There is deliberately no advertising category. We do not run advertising or cross-site tracking tags, so there is nothing here to refuse.

What We Actually Set

Strictly Necessary

• sb-[project]-auth-token, first party, set by our authentication provider Supabase. Holds your signed-in session. Expires when the session does.
• candidate_session, recruiter_session, admin_session, first party. Legacy session cookies still used on some sign-in paths. Up to 7 days.
• integration_oauth_state_[provider] and integration_oauth_company_[provider], first party. Hold a random anti-forgery token for the 10 minutes an ATS connection takes to complete, then are deleted.
• calendar_oauth_state_[provider] and calendar_oauth_recruiter_[provider], first party. The same thing for connecting a calendar.
• Cookie consent record, set by our consent manager, GetTerms. Remembers which categories you accepted, so we do not ask again on every page.
• _GRECAPTCHA, set by Google on pages with a form protected against bots, currently the contact form. Used to tell a person from a script.

Functional, stored in your browser only

• rl_theme. Whether you chose light or dark.
• auth_active_role and auth_profiles. Which of your profiles is active, for people who hold more than one, so a reload does not drop you into the wrong dashboard.
• preferred_currency. The currency you chose for viewing salary and market data.
• recruiterlog.pricing.currency. Whether you chose to read prices in US dollars or South African rands.

These four are local storage rather than cookies. They stay on your device and are never transmitted to us.

Analytics

• _ga and _ga_[id], set by Google Analytics. Distinguish one visitor from another and group page views into a visit. Up to 2 years.

Advertising

None. We previously ran a Meta advertising pixel. It was removed in September 2026, and no advertising or cross-site tracking tag has replaced it. If that ever changes, it will be listed here by name, in its own consent category, before it runs.

How to Control This

Our consent manager. The banner shown on your first visit lets you accept or reject the optional categories, and the same control can be reopened at any time to change your mind. Strictly necessary cookies are not offered as a choice, because the site cannot work without them.

Your browser. Every major browser can block or delete cookies, usually under Privacy or Site Settings, and can clear local storage along with them. Blocking everything will sign you out and may break checkout and ATS connections, because those depend on the strictly necessary cookies above.

Opting out at the source. Google offers a browser add-on that opts you out of Google Analytics on every site, whatever any individual site does.

Global Privacy Control. Where your browser or an extension sends a Global Privacy Control signal, we treat it as a refusal of every optional category, which today means analytics. We do not act on the older "Do Not Track" header, which was never given an agreed meaning.

Third Parties Named Here

Where a cookie above is set by another company, that company's own privacy terms govern what it does with the data. We list them by name so you can go and read them: Supabase, Google and GetTerms. This policy covers our use of them, not their independent processing.

Updates

We update this policy whenever the list above changes. The date at the top is when it last changed, and the version live on the site is the one that applies to your visit.

Contact

Bitrora, trading as RecruiterLog
support@recruiterlog.com
recruiterlog.com/contact