Cookie Policy

01Strictly necessary

A session cookie keeps you logged in as a recruiter or, separately, as a candidate on your country's Expertini account — without it, the ATS and the application flow simply don't function. These cannot be disabled without breaking login.

02Security

A CSRF-protection token and rate-limiting cookies help prevent cross-site request forgery and abuse of public endpoints like the lead and application forms. Also strictly necessary.

03Analytics — the one optional category

Google Analytics sets first-party cookies (names beginning `_ga`) to tell a returning visit from a new one and to measure how pages and features are used. It is the only third-party script this product loads: there is no tag manager on ats.expertini.com, so no script can be added to these pages without a code change and a deployment. These run on the public pages and inside the signed-in recruiter interface. They are not strictly necessary — the ATS works perfectly well without them — which is why this is the only category you are asked about rather than told about.

What analytics sees is navigation and device data: pages viewed, referrer, browser, approximate location derived from IP. It is never given the contents of a CV, an application, an interview note, or any candidate record, and no candidate or recruiter identifier is sent to it.

04What we don't use

No advertising or retargeting cookies are set on ats.expertini.com. There are no ad units anywhere in this product, and no ad network is loaded on the recruiter dashboard or the candidate application flow. Every page here loads with advertising storage, advertising user data, advertising signals and ad personalisation all set to refused — sent by the page on every request, so the refusal holds no matter how any analytics or tag account is configured elsewhere. Nothing measured here follows you to another site.

05Managing cookies

The strictly necessary and security cookies can't be turned off — blocking them in your browser simply prevents login from working. Analytics is the one thing you can decline, and declining it costs you nothing in the product.

If you're visiting from the EU/EEA, the UK or Switzerland, analytics stays switched off until you accept it — a short banner asks on your first visit, and nothing analytics-related is set before you answer. Elsewhere analytics starts on and you can switch it off at any time. Either way we honour a browser-level Global Privacy Control signal automatically: if your browser sends one, we treat it as a refusal and don't even ask.

Your choice is remembered for 180 days in a single first-party cookie, and you can change it whenever you like — the "Cookie settings" link in the footer of this page reopens the same choice, wherever in the world you are, and applies across the whole product including the signed-in dashboard.