Cookies and local storage

The one cookie

BuildPersona sets a single cookie, and only after you sign in: a session cookie issued by the authentication library. It holds a session token and nothing else, it is not readable by scripts in your browser, it is restricted to this site, it is sent over HTTPS only in a deployed environment, and it expires after seven days.

It is strictly necessary: without it there is no way to stay signed in. There is no version of the application that works without it, so there is nothing to consent to and no cookie banner is shown. Whether that position needs confirming for the jurisdiction you are in is TODO(legal): confirmation that only strictly necessary cookies are set and no consent banner is required in the target jurisdictions.

What BuildPersona does not use

• No analytics, advertising or tracking cookies.
• No third-party cookies, pixels, tags or session recording.
• No browser local storage, session storage or IndexedDB. The application keeps nothing in your browser between visits beyond the session cookie.
• No cookies at all on the public pages, including this one, the landing page and the policy pages.

Related records that are not cookies

Signing in creates a session record on the server that includes the IP address the request came from and your browser’s user agent string. That is described in the privacy policy and is deleted when the account is deleted.

Other sites

Following a link to LinkedIn, or messaging the BuildPersona WhatsApp number, puts you on a service run by someone else, under their cookie policy and their terms. BuildPersona has no control over what they set.

Clearing it

Sign out, or clear cookies for this site in your browser, and the session cookie is gone. Clearing it signs you out; nothing else in the application is affected.