Cookie policy
Effective date: February 2023
Last updated: 5 October 2026
This page lists everything we store on your device, what each thing is for, and how to switch off the parts that are not essential. We have written it in plain language on purpose: if something here is unclear, that is a fault in the page and we would like to hear about it at help@careeros.com.
It covers three places, and they are not the same:
- Our website, www.careeros.com — the pages you are reading now.
- The CareerOS platform, app.thecareeros.com — where students and career advisors work.
- The employer platform, employer.thecareeros.com — where employers post roles and review candidates.
Cookies, and the storage that is not cookies
A cookie is a small file a site asks your browser to keep, and your browser sends it back on your next visit. Some last only until you close the browser; others stay until they expire or you delete them.
Several of the things in the tables below are not cookies at all — they live in your browser's local storage. It works much the same way, except it is not sent back to a server with every request. The practical difference is how you clear it: local storage is removed through your browser's site data settings rather than its cookie settings.
On our website
Three things set something here.
Cookiebot remembers the choice you made in the banner, so we do not ask again on every page.
PostHog does two separate jobs for us, and they are worth separating. It runs the support chat, which keeps one local-storage entry so your conversation is still there if you reload — that is the only way the chat can work, so it is always on. It also provides our website analytics, which are different: they only start if you accept the statistics category, and if you decline, nothing is stored and nothing is measured. We send those analytics through our own address at p.careeros.com rather than to PostHog directly. We do not record browsing sessions on this website.
HubSpot runs the booking calendars and the enquiry forms on our resource pages. Its cookies tell us which page a booking or an enquiry came from, so we know which of our pages are actually useful. They are not used for advertising.
| What | Who sets it | What it is for |
|---|---|---|
| CookieConsent | Cookiebot | Remembers your cookie choice. Essential |
| ph_conv_* (local storage) | PostHog, through p.careeros.com | Keeps your support chat conversation across a reload. Essential to the chat |
| careeros:app-qr (local storage) | Us | Remembers that you dismissed the mobile-app card, so it stays dismissed |
| ph_* | PostHog, through p.careeros.com | Website analytics. Only set if you accept statistics |
| hubspotutk, __hstc, __hssrc, __hssc | HubSpot | Attributes a booking or an enquiry to the page it came from |
In the CareerOS platform
Signing in is the first thing that stores anything: Auth0 keeps your session in local storage so you are not asked for your credentials on every page. We also keep small notes of your own choices — your cookie choice, and the confirmations you told us not to show again, such as archiving a company without the "are you sure" step.
The rest is about understanding how the product is used and catching what breaks: Google Analytics, Hotjar and Mixpanel for product analytics, Statsig to decide which version of a feature you see when we are testing an improvement, Sentry to tell us when something has gone wrong, and GetStream to run the in-app chat.
| What | Who sets it | What it is for |
|---|---|---|
| @@auth0spajs@@* (local storage) | Auth0 | Keeps you signed in. Essential |
| cookiesAccepted | Us | Remembers your cookie choice. Essential |
| remember* (local storage) | Us | Remembers confirmations you asked us not to repeat |
| _ga, _ga_* | Google Analytics | Which pages are used, and how people move through them |
| _hj* | Hotjar | How features are used, and where people get stuck |
| mp_* | Mixpanel | Which features are used, and how often |
| Storage named by the provider | Statsig | Which version of a feature you are shown |
| Storage named by the provider | Sentry | Error monitoring, and the session recording described below |
| Storage named by the provider | GetStream | Runs the in-app chat |
In the employer platform
Much the same, with two differences: there is an interactive product demo, and the support chat is a different one. Auth0 keeps you signed in, Mixpanel and Hotjar cover product analytics, Sentry covers errors, PostHog runs the support chat here — with its analytics switched off, so it measures nothing — Storylane plays the product demo, and GetStream runs the in-app chat.
| What | Who sets it | What it is for |
|---|---|---|
| @@auth0spajs@@* (local storage) | Auth0 | Keeps you signed in. Essential |
| mp_* | Mixpanel | Which features are used, plus the session recording described below |
| _hj* | Hotjar | How features are used, and where people get stuck |
| Storage named by the provider | Sentry | Error monitoring, and the session recording described below |
| Storage named by the provider (local storage) | PostHog | Runs the support chat. No analytics are captured here |
| Storage named by the provider | Storylane | Plays the interactive product demo |
| Storage named by the provider | GetStream | Runs the in-app chat |
Session recording, stated plainly
In the two platforms, some sessions are recorded. Sentry records a sample — roughly one session in ten, and any session where an error happens — so that when something breaks we can see what led to it instead of asking you to reproduce it. In the employer platform, Mixpanel also records sessions and builds heatmaps of where people click.
A recording is a reconstruction of the pages as your browser drew them. We use them to fix faults and to find the places where the product is confusing. We do not record anything on our website at www.careeros.com.
What we do not do
We do not run advertising on any of these sites, we set no advertising cookies, and we do not share what we collect with advertising networks. We do not follow you across other companies' websites.
Changing your mind
On this website, use the button below — it reopens the consent banner, where you can change or withdraw what you accepted.
In the CareerOS platform, the banner shown when you first sign in records the same kind of choice.
Everywhere, your browser is the backstop: it can block or delete cookies and site data for any site, usually under a Privacy or Site settings menu. Remember that local storage is cleared under site data rather than cookies. Turning things off may affect how parts of the sites work — the chat, for instance, cannot restore your conversation without its one entry.
Two more things worth knowing. If you have set your browser's "Do Not Track" signal, our website analytics do not capture at all. We do not currently act on the Global Privacy Control signal.
Sites we send you to
Some links take you elsewhere — a job application, a survey, a video, an article. Those sites set their own cookies under their own policies, and we have no control over them, even when you arrived from us.
Questions
Write to help@careeros.com. For what we do with personal data more broadly, including your rights and how to exercise them, see our Privacy Policy.