legal
Cookie preferences
Three cookies and one local-storage entry, all of them strictly necessary and none of them for tracking. Every one is named below, with what it does and how long it lasts.
Last updated 31 August 2026
There is nothing here to switch off. No analytics, no advertising, no third-party embeds, and no fonts fetched from somebody else's server. The optional categories below are listed because they are declared in the code and gated — so anything added later starts switched off, and you get asked before it runs, not after.
Strictly necessary
What signing in consists of. Without these the server cannot tell one request from another, and there is no way to stay signed in or to submit anything.
- jobsync_at 15 minutes
- Cookie · HttpOnly · SameSite=LaxThe short-lived half of your session. HttpOnly, so no script on the page — ours or anyone else’s — can read it.
- jobsync_rt 14 days
- Cookie · HttpOnly · SameSite=Lax · path /api/auth/refreshRenews the session so you are not signed out every quarter of an hour. Scoped to the one endpoint that redeems it, so it is not attached to any other request. Revoking a device from Setup ends it immediately.
- XSRF-TOKEN The browser session
- Cookie · readable by the pageEchoed back on every write so the server can tell a form you submitted from one another site submitted on your behalf. Readable on purpose: proving you can read it is the check.
- jobsync-theme Until you clear site data
- Local storageLight or dark. Never sent to the server — it is read by the page to avoid a flash of the wrong theme, and that is all it does.
Preferences
Remembering how you had things arranged — a filter, a column, a dismissed hint. Nothing falls under this today.
Nothing is stored under this heading.
Analytics
Counting how the product is used. Nothing falls under this today: there is no analytics script, no tag manager and no third-party pixel on any page of this site.
Nothing is stored under this heading.