Cookie Policy

What we store in your browser, and why.

IncognitoH uses very little browser storage, and none of it is for advertising or cross-site tracking. Most of it is browser storage rather than cookies in the strict sense; this page covers both.

What we store

• Sign-in tokens: kept in your browser so you stay signed in between visits and page refreshes. Removing them signs you out.
• A remembered sign-in address: only if you tick "remember me", and only so the field is pre-filled. Never your password.
• Cached account details: your own account record, so pages load without refetching everything.
• A sign-in handshake value: if you press "Continue with Google", or another provider we offer, a one-time value is kept for the few seconds it takes the provider to send you back, so the response can be matched to the request that made it.
• A chosen plan: if a recruiter picks a plan on the sign-up form, the choice waits in the browser until they have confirmed their address and signed in, and is then removed.
• A visitor identifier: a random value your browser invents for itself so that our visit counters can tell visits from visitors. It is generated here, never joined to your account, and sent only to our own analytics endpoint, which stores a hash of it. It is not cleared when you sign out.
• An arrival channel: the one word for where you first came from (search, social, direct, or the name of a campaign link), kept beside the visitor identifier so we can tell which channels bring people. Never a URL, and never changed by a later visit.
• An invitation code: if you arrived on somebody's referral link, the code from that link is kept until you finish signing up, so the person who invited you is credited. It is removed from the address bar straight away so the link cannot be re-shared by accident.
• Media access cookies: where photos are served through our content network, short-lived cookies let your browser load them. They carry no identifier of yours.

Other sites you may be sent to

• Stripe: a recruiter paying for a plan completes checkout on stripe.com, which sets its own cookies under its own policy.
• Google: signing in with Google happens on a page our identity provider hosts and on Google's, each under its own policy.
• YouTube: Career Hub videos open on YouTube, under its policy.

None of those cookies are set by incognitoh.com, and none of them are read by it.

What we do not do

• No advertising cookies.
• No third-party tracking or cross-site profiling.
• No selling or sharing of browsing behaviour.

Managing it

Everything above except the visitor identifier and the arrival channel is needed to sign in and use your account, so there is nothing to opt out of there without also losing the ability to sign in. Those two are used only for aggregate visit counts.

Signing out removes the sign-in tokens and the cached account details. The remembered sign-in address, the visitor identifier and the arrival channel stay, because they are conveniences rather than credentials. Clearing your browser's storage for this site removes all of it, including those three, and signs you out.