Version 2.0, effective April 2026
Candoora Cookie Policy
GPC compliant. No third-party advertising. No social media pixels. No advertising network sharing.
1. What Are Cookies
Cookies are small text files placed on your device when you use Candoora. We also use related technologies including session storage and anonymous analytics tracking. This policy explains what we use, why we use it, and how you can control it.
2. Cookie Categories
| Category | Name / description | Purpose | Duration | Consent |
|---|---|---|---|---|
| Strictly necessary | Authentication token, CSRF token, and consent preferences record. | Login security and remembering consent choices. | Session or 12 months. | No. Cannot be disabled without breaking core functionality. |
| Functional | Language or locale preference and last active feature. | Returns users to their last-used section and displays correct currency. | 12 months or 30 days. | Yes. Functional consent required. |
| Analytics | Platform usage events, feature adoption rates, and error rates anonymised before storage. | Understanding how the platform is used and improving it. No resume content or personal data included. | 90 days. | Yes. Analytics consent required. |
| A/B testing | Variant assignment record showing which UI variant a user sees. | Measuring whether changes improve user experience without personal data. | 30 days. | Yes. Analytics consent required. |
What Candoora Does Not Use
Candoora does not use advertising cookies, third-party tracking cookies, social media pixels from Meta, LinkedIn, TikTok, or Google, or cookies that share data with advertising networks. Our analytics are privacy-first, and we do not use Google Analytics or tracking that sends user data to third parties.
3. Consent Management
UK and EU users
No non-essential cookie is set before affirmative consent. Candoora honours the Global Privacy Control signal and treats it as withdrawal of consent for analytics and functional cookies.
California users
Candoora does not sell or share data via cookies. The opt-out of sharing right is satisfied. Analytics cookies can be managed via Cookie Preferences.
All users
Cookie preferences are adjustable at any time via Account Settings > Privacy > Cookie Preferences, or through browser settings. Disabling strictly necessary cookies will prevent login.