Cookie Policy.

1. What cookies are

Cookies are small text files a website can store on your device. They can be “strictly necessary” (needed for the site to function — for example to keep you logged in) or non-essential (for analytics, advertising, or tracking). Under the EU ePrivacy rules (in Romania, Law no. 506/2004, which transposes the ePrivacy Directive), storing or reading non-essential information on your device requires your prior consent; strictly necessary storage does not. The GDPR separately governs how we handle any personal data involved. These rules are technology-neutral — they apply to cookies and similar technologies (such as local storage or tracking pixels), not just text files.

2. Do we use cookies?

Only the strictly necessary ones. Hireloom uses no advertising, marketing, tracking, profiling, social-media, or third-party analytics cookies. We do not build visitor profiles and we do not share data with ad networks. Because we set only strictly necessary cookies, no cookie consent banner is required under Law no. 506/2004 and Art. 5(3) of the ePrivacy Directive.

3. The cookies we use

The only cookies set are authentication and session cookies in the private administration area (/admin), used solely so the site operator can sign in and stay signed in. A normal visitor browsing the public site — reading pages, viewing roles, or submitting a form — is not signed in and so these cookies are not set for you.

• Supabase authentication cookies (e.g. sb-…-auth-token, and a short-lived code-verifier during sign-in) — set by our authentication provider only when the operator signs in to /admin. Purpose: keep the authenticated session secure. Type: first-party, strictly necessary. Duration: the login session (the short-lived verifier expires within minutes; the session token lasts until logout or expiry).

If our hosting or network provider (Vercel; or Cloudflare, if a proxy is ever enabled) sets a strictly necessary security or load-balancing cookie, it serves only to deliver and protect the site, never to track you across sites.

4. Other storage

We do not use localStorage or sessionStorage to track you. The interactive elements on the site (such as the network graphic on the home page) keep their state only in memory for the current page view and store nothing persistent on your device for analytics or advertising.

5. Analytics (current and future)

We currently run no analytics at all. If we add analytics in future, we intend to use a privacy-friendly, cookieless tool (such as Plausible) chosen to avoid cookies and persistent device identifiers. We will update this policy before doing so, and if any future tool stores or reads non-essential information on your device, we will obtain your consent first.

6. Managing cookies

You can block or delete cookies through your browser settings. Since we only use strictly necessary cookies, blocking them has no effect on browsing the public site; it would only prevent the operator from signing in to the private admin area. Browser help pages explain how to manage cookies for Chrome, Firefox, Safari, and Edge.

7. Changes and contact

We will update this policy if our use of cookies changes; the “last updated” date reflects the current version. For more on how we handle personal data, see our Privacy Policy. Questions about cookies: contact@hireloom.io.