Cookies
What we store on your device, and what happens if you decline. This list was compiled by auditing the code, not from a template.
These make the site work. They cannot be switched off, and under PECR and the ePrivacy Directive they do not require consent because the service cannot be provided without them.
| Cookie | Purpose | Lifetime |
|---|---|---|
| Session cookie (prefixed "Jobora AI") | Keeps you signed in. HttpOnly and Secure, so scripts cannot read it. | Session, or up to 30 days if you choose to stay signed in |
| CSRF token | Prevents another site submitting forms as you. | Session |
| jb_consent | Remembers your cookie choice. Ironically necessary — without it we would have to ask every visit. | 1 year |
| Session / refresh (API) | Authenticates requests to the AI service. | Session / 30 days |
These only load if you accept. Until you do, no analytics script is loaded at all — the tags are not on the page, so nothing is sent and nothing is stored.
| Provider | Cookies | Purpose | Lifetime |
|---|---|---|---|
| Google Analytics 4 | _ga, _ga_*, _gid | Which pages people visit and where they arrive from, so we know what to improve. | Up to 2 years |
| Microsoft Clarity | _clck, _clsk, CLID | Aggregate interaction patterns — where people get stuck on a page. | Up to 1 year |