The short version: we use two cookies, both tied to your sign-in — and our analytics deliberately uses none. Here's exactly what and why.
1. What cookies are
Cookies are small files a website stores on your device. Sites also use "similar technologies" — localStorage, sessionStorage, and IndexedDB — which store data in your browser without sending it anywhere on every request. This policy covers both, for the Hireable app (app.gethireable.com), the marketing site (gethireable.com), and the Chrome extension.
2. The cookies we set
| Cookie | What it does | Lifetime | Type |
|---|---|---|---|
__session | Keeps you signed in to the app by carrying your session credential. Set only after you sign in. | 1 hour (refreshed while you use the app) | Strictly necessary |
__session_present | A yes/no marker (contains no personal data or credentials) so the marketing site can show "Dashboard" instead of "Sign in" when you're already signed in. | 1 hour | Functional |
That's it. Neither tracks you or serves advertising: one signs you in, the other only remembers that you're signed in. We don't show a cookie banner because UK rules (PECR) don't require consent for cookies like these, and we've designed everything else — including analytics — to work without cookies at all.
3. Analytics — deliberately cookieless
We use PostHog, hosted in the EU, configured to run without cookies or persistent device identifiers — nothing is stored on your device for analytics on either the app or the marketing site. In the app, analytics events are linked to your account so we can understand feature usage; on the marketing site, visits are effectively anonymous. See the Privacy Policy (gethireable.com/privacy, section 9) for the full picture including session replay masking and error monitoring.
4. Browser storage we use (not cookies)
Like most web apps, we keep small amounts of data in your browser so things work smoothly:
- Signing in — our authentication provider (Firebase) keeps your sign-in session in IndexedDB so you don't have to log in every visit. It's cleared when you sign out.
- Preferences — your theme choice (light/dark), sidebar width, and dismissed tips (localStorage).
- In-progress work — drafts and hand-offs like a job description you've pasted, and your assistant chat session reference (localStorage/sessionStorage, per session where possible).
- Demo access — if you unlock a gated product demo on the marketing site, the access token is kept in localStorage so you don't need to re-request it.
- Timing of in-app prompts — timestamps that stop us re-showing upgrade suggestions too often, or at a bad moment (localStorage/sessionStorage).
- Chrome extension — stores your sign-in token, preferences, and a small sync cache on your device via Chrome's extension storage. Details: gethireable.com/extension-privacy.
5. Third-party embeds
A few pages include third-party widgets, which may set their own cookies under their own policies when they load:
- Trustpilot (review widget on the homepage and in the app) — Trustpilot's privacy policy
- Calendly (demo booking — the scheduler loads only after you submit the demo form) — Calendly's privacy policy
We don't control these cookies. If you block third-party cookies in your browser, both widgets still work for viewing and booking.
6. Managing cookies
You can block or delete cookies in your browser settings at any time. Blocking __session will sign you out of the app; everything on the marketing site works without cookies entirely.
7. Changes and contact
We'll update this page when our cookie use changes and bump the date above. Questions: privacy@gethireable.com.