Version: 15 June 2026
This cookie policy explains which cookies and similar storage technologies JobrivoAI actually uses — for what purpose, for how long, and on what legal basis. The table below lists every entry actually in use. Categories we do not use (such as advertising or marketing cookies) are not listed, because we do not use them.
| Name | Provider | Purpose | Storage duration | Type | Category |
|---|---|---|---|---|---|
| __session | Clerk | Authentication token; keeps you signed in. | session | Cookie · first-party | Strictly necessary |
| __client_uat | Clerk | Indicates the signed-in state (no personal data). | until sign-out | Cookie · first-party | Strictly necessary |
| __client, __clerk_handshake | Clerk (clerk.jobrivoai.com) | Secure client token and its renewal (on the Clerk subdomain). | long-lived / transient | Cookie · first-party | Strictly necessary |
| __cf_bm, _cfuvid | Cloudflare / Clerk | Bot and abuse protection for the sign-in infrastructure. | 30 min / session | Cookie · third-party | Strictly necessary |
| ref_code | JobrivoAI | Attributes a referral — only after you click a referral link. | 7 days | Cookie · first-party | Strictly necessary |
| jobrivo_lang | JobrivoAI | Remembers your language choice. | 1 year (cookie) / persistent | Cookie + localStorage · first-party | Strictly necessary |
| jobrivo_analytics_consent | JobrivoAI | Stores your analytics consent decision. | persistent | localStorage · first-party | Strictly necessary |
| theme | JobrivoAI | Remembers the light/dark setting. | persistent | localStorage · first-party | Functional |
| jrv_* | JobrivoAI | Local drafts and settings (e.g. saved resumes, templates, interview answers, weekly goal). Stays in your browser. | persistent | localStorage · first-party | Functional |
| jrv_wf_jd, jrv_wf_resume | JobrivoAI | Carries input between tools (e.g. tailoring → cover letter). | browser session | sessionStorage · first-party | Functional |
| ph_…_posthog | PostHog (EU) | Pseudonymous product/usage analytics — loads only after your consent. | persistent | localStorage · third-party | Statistics (consent) |
| sentryReplaySession | Sentry (EU) | Error diagnostics: keeps a possibly recorded session together across page reloads. | browser session | sessionStorage · third-party | Error diagnostics |
Cookies are small text files a website stores in your browser. "localStorage" and "sessionStorage" are related browser storage (not cookies); they are not automatically sent to a server with every request and generally stay on your device. First-party entries come from JobrivoAI itself, third-party entries from integrated services. The table above lists every entry actually in use.
• Strictly necessary (no consent required, Section 25(2) no. 2 TDDDG): sign-in (Clerk), language choice, attributing a referral, and storing your cookie decision itself. • Functional: local drafts, templates and interface settings that stay in your browser. • Statistics (consent required, Section 25(1) TDDDG together with Art. 6(1)(a) GDPR): product analytics with PostHog — only after your explicit consent. • Error diagnostics: Sentry processes technical error data on the basis of our legitimate interest (Art. 6(1)(f) GDPR). We use no advertising or marketing cookies and run no cross-site tracking.
On your first visit we show a choice dialog with two equally weighted buttons — "Decline" and "Accept". Nothing is pre-selected, and merely continuing to browse does not count as consent. PostHog loads only after you choose "Accept". Processing takes place on EU servers (Germany), your IP address is discarded, and no session recording takes place.
You can withdraw a consent you have given at any time with effect for the future — most easily via the always-available "Cookie settings" link in the footer, which re-opens the choice dialog and stops analytics immediately; alternatively, informally by email to jobrivoai@gmail.com. The lawfulness of processing carried out before the withdrawal is unaffected.
• PostHog Inc. (USA) — product analytics, hosted in the EU (Germany); only after consent. Transfer to the USA on the basis of the EU-US Data Privacy Framework and the EU Standard Contractual Clauses. • Functional Software, Inc. (Sentry) (USA) — error diagnostics, EU data residency; EU-US Data Privacy Framework and Standard Contractual Clauses. • Clerk, Inc. (USA) — the sign-in cookies listed above; EU-US Data Privacy Framework and Standard Contractual Clauses. • Purchases: checkout runs on Lemon Squeezy's pages. The cookies set there (e.g. laravel_session, XSRF-TOKEN, Cloudflare __cf_bm/_cfuvid) are set on Lemon Squeezy's domain and are governed by its cookie/privacy policy, not ours. Details and legal bases are in our privacy policy.
You can view, manage and delete cookies and site data at any time in your browser settings. Because we use only necessary cookies plus — after consent — analytics storage, blocking cookies entirely may prevent sign-in. Deleting the sign-in cookies will sign you out.
We adapt this policy when the services we use or the legal situation change. The current version is always available on this page; the date at the top indicates the version.
For questions about this cookie policy, contact us at jobrivoai@gmail.com. Details on data processing are in our privacy policy. This policy is provided in several languages; in case of doubt or discrepancies, the German version alone is authoritative.