Cookie Policy

Cookies are small files a website stores in your browser. Local storage and session storage are similar browser features. This policy lists every one JobMatch.AI uses, plus what the browser extension and desktop app store on your device.

• jm_session — Cookie, strictly necessary. Keeps you signed in. Holds a random token; only its hash is stored on our side. Page scripts cannot read it (HttpOnly), and it is only sent over HTTPS. Lasts: 30 days, or until you sign out.
• jm_oauth_nonce — Cookie, strictly necessary. Only while you sign in with Google: a random value that proves the browser finishing the sign-in is the one that started it, so nobody can sign you into their account instead. Page scripts cannot read it (HttpOnly). Lasts: 10 minutes, deleted as soon as the sign-in completes.
• jm_last_email — Cookie, functional. Remembers the email address you last signed in with on this device, to greet you and fill it in. It is not used to sign you in. "Not you?" in the sign-in window deletes it. Lasts: 1 year; kept after sign-out.
• jm_consent_v1 — Local storage, strictly necessary. Remembers your answer to the analytics question (yes or no) and the date you gave it, so we do not ask again. Nothing in it identifies you. Lasts: Until you change it in Cookie settings or clear site data.
• jm-theme — Local storage, functional. Remembers whether you chose the light theme, the dark theme, or to match your device. Lasts: Until you change it or clear site data.
• jm-lang — Local storage, functional. Remembers the language you chose for the interface. Lasts: Until you change it or clear site data.
• jm-tr-v1-<language> — Local storage, functional. Only if you chose a language other than English: a saved copy of the translations of our own page text, so pages appear in your language straight away. Contains no information about you. Lasts: Until you clear site data.
• _ga — Cookie, analytics (only if you accept). Google Analytics: a random identifier that tells one visitor's page views apart from another's, so we can count visits. Set only after you accept analytics, and only on jobmatchai.rcinc.app. Lasts: Up to 2 years; deleted when you turn analytics off.
• ga<measurement id> — Cookie, analytics (only if you accept). Google Analytics: keeps the state of your current visit (for example, that it is the same session). Set only after you accept analytics. Lasts: Up to 2 years; deleted when you turn analytics off.
• jobmatch_resume_bank — Local storage, functional. Keeps résumés you add while signed out, in this browser only. Moved into your account and cleared when you sign in. Lasts: Until you sign in or clear site data.
• onboarding_completed_<account id> — Local storage, functional. Remembers that you finished the welcome tour, so it is not shown again. Lasts: Until you clear site data.
• jobboard_tutorial_seen — Local storage, functional. Remembers that you have seen the job-board tips on the home page. Lasts: Until you clear site data.
• jm_support_chat_v1 — Session storage, functional. Keeps your help-chat conversation while the tab is open. Lasts: Until you close the tab or clear the conversation.
• jobmatch.extensionPairTried — Session storage, functional. Records that the app has already tried to connect the browser extension in this tab, so it does not try repeatedly. Lasts: Until you close the tab.

Analytics is off until you say yes. The first time you visit, a notice asks whether we may use Google Analytics. Until you accept, nothing is sent to Google and the analytics cookies above are not set. Your answer is stored in this browser, and you can change it at any time with Cookie settings in the footer. Turning analytics off stops it at once and deletes the analytics cookies. If your browser sends a Global Privacy Control signal, we treat that as a no and don't ask.

What it sends, if you accept: the address of the page you are on (without anything after a ? or #), the page title, and what Google Analytics collects by default — your approximate location, browser, device and how you arrived. We don't send your name, email address, account identifier, résumé or anything you type. Google signals and ad personalisation are switched off, and the cookie belongs to this site alone. The admin console and the desktop app are not measured. Google keeps detailed event data for two months (its default setting), plus the aggregate reports built from it.

What we don't use: advertising cookies, advertising or remarketing tags, or any analytics other than the one above. We also record which pages you visit while signed in, on our own servers, to understand how the Service is used — see our Privacy Policy.

• Stripe sets its own cookies on its checkout pages when you buy credits, under Stripe's privacy policy.
• Google sets its own cookies on its sign-in pages if you choose Continue with Google.
• Google Analytics (Google LLC) receives the data in section 3 only if you accept analytics.
• Google Fonts: our pages load fonts from Google's servers, which receive your IP address and browser details.
• Home-page images: some logos on our home page load from third-party sites, which receive your IP address and browser details.

• The browser extension stores its connection token and the JobMatch address it talks to in Chrome's extension storage. Removing the extension deletes them.
• The desktop app stores its device token encrypted on your computer, using your operating system's secure storage. If secure storage isn't available, it doesn't save the token and you pair again next time.

The session cookie is strictly necessary: without it you can't stay signed in, and the consent entry remembers your answer. The analytics cookies are optional and off until you accept. The other entries remember things you chose or did, and are used only by JobMatch.AI.

You can delete cookies and site data at any time in your browser's settings. If you do, you'll be signed out, locally saved résumés will be lost, and your settings will reset. OWNER TO CONFIRM: confirm with counsel whether jm_last_email and the functional storage entries need consent in the EU/UK, and add a consent control if so

If we add a cookie or storage entry, we'll update this list and the date above. Questions: admin@rcinc.app.