Cookie Policy
Engineering draft — counsel review required. This document was drafted by engineering and has not been reviewed by legal counsel. Draft, not yet in effect.
This Cookie Policy explains how JobMax.ai, operated by Alex Rabinovich and Max Glubochansky ("JobMax.ai", "we", "us"), uses cookies and similar technologies on jobmax.ai and within the JobMax.ai application.
1. What Cookies Are
Cookies are small text files placed on your device by a website. They let the site remember your session and preferences. Cookies set by us are "first-party" cookies; cookies set by other domains are "third-party" cookies.
2. Cookies We Use
JobMax.ai currently uses strictly necessary (essential) session cookies only. These are set by our authentication system (SuperTokens, self-hosted in our infrastructure) when you log in, and the Service cannot function without them.
| Cookie | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
sAccessToken | JobMax.ai (SuperTokens) | Authenticates your session on each request | Essential, first-party, HTTP-only | Short-lived; refreshed automatically during an active session |
sRefreshToken | JobMax.ai (SuperTokens) | Renews your session access token without re-login | Essential, first-party, HTTP-only | Longer-lived; cleared on logout or session expiry |
Both cookies are HTTP-only (not readable by page scripts) and sent only over encrypted (HTTPS) connections. Our authentication system may set a small number of additional first-party cookies strictly required for session security (for example, anti-CSRF protection); any such cookies are essential and used solely for authentication integrity.
3. What We Do Not Use
- No advertising or tracking cookies. We do not use third-party ad networks, cross-site trackers, or social media tracking pixels on our site or in the application.
- No sale or sharing of cookie data. Cookie data is not sold or shared for behavioral advertising.
- No third-party analytics cookies as of the date of this policy. If we adopt analytics cookies in the future, we will update this policy first and, where required by law, ask for your consent before setting them.
4. Managing Cookies
Because our cookies are strictly necessary for the Service to work, they cannot be disabled while using JobMax.ai — blocking them will prevent login. You can:
- clear or block cookies through your browser settings (see your browser's help pages);
- log out of JobMax.ai, which ends your session and invalidates your session cookies.
Consent banners are not currently displayed because we set only strictly necessary cookies, which are exempt from consent requirements under laws such as the ePrivacy Directive. This position should be re-verified whenever new cookies are introduced.
5. Related Technologies
- Local/session storage: the application may use browser storage for non-identifying interface state (for example, remembering an open panel). It is not used for tracking.
- Signed media URLs: images and videos are served through expiring CloudFront signed URLs. These are request parameters, not cookies, and are not used to track you across sites.
6. Changes to This Policy
If we add new cookies or change how we use them, we will update this policy and its "Last updated" date before the change takes effect, and obtain consent where legally required.
7. Contact
Questions about this Cookie Policy: privacy@jobmax.ai.