Cookies
What Cernoria keeps in your browser, which ones you can switch off and how to change your mind.
8 October 2026
The short version
The cookies the application needs to work are always set: your session, your language and your own answer to this notice. Article 22.2 of the Spanish LSSI exempts these from consent.
Analytics and marketing cookies are not loaded until you say yes. Not loaded and disabled: not loaded. If you decline, those scripts are never even requested and your browser never contacts Google, Microsoft or Meta.
Always set
| What | What for | How long |
|---|---|---|
| Supabase session cookies | Keeping you logged in from one page to the next. Without this you would have to log in on every click. | Until you log out |
| cernoria-idioma | Remembering which language you want to see the application in. | One year |
| cernoria-pais | Knowing which country you visit from, to decide whether to show this notice. It only stores two letters. | One month |
| cernoria-consentimiento | Remembering your answer to this notice, so you are not asked again on every page. | Twenty-four months if you accept; seven days if you decline |
| cernoria-ref | Remember the invitation code you arrived with, until you create your account. Only if you came through an invitation. | One month |
| cernoria-menu | Remember whether you hid the left-hand menu on a computer. | One year |
| cernoria-tema (in the browser, not a cookie) | Remembering the colour palette you chose. | Until you clear your browser data |
Only set if you accept them
| What | Who | What for | How long |
|---|---|---|---|
| _ga, _ga_* | Google Analytics 4 | Knowing which screens get used and which don't, so we know what to fix first. It receives neither your CV, nor the jobs you look at, nor your name. | Two years |
| _fbp, _fbc | Meta (Facebook, Instagram) | Measuring whether our ads bring in people who sign up, so we don't spend on the ones that don't work. | Three months |
| _clck, _clsk | Microsoft Clarity | Seeing how the screen gets used: where people click and how far they scroll. Every piece of text is masked before it leaves your browser, and nothing at all is recorded in the CV editor, the cover letter editor or your profile. | One year (_clck) and one day (_clsk) |
Screen recording, in detail
Microsoft Clarity records how the screen gets used: where the mouse goes, where people click and how far they scroll. It is there to show which screen people get stuck on, which no number can tell us.
Every piece of text is masked before it leaves your browser. What travels is the structure of the page, not its content: in the recording, your CV, the jobs you are looking at and your salary expectations appear as blocks, not as words. Images you have uploaded do not leave either.
And there are three screens where nothing at all is recorded: the CV editor, the cover letter editor and your profile. There the content is the personal data, and masking it would not be enough.
None of this happens unless you accept analytics cookies: the script is never even requested.
Why the notice doesn't appear in every country
Prior consent for analytics and marketing cookies is mandatory in the European Economic Area, and also in the United Kingdom, Switzerland, Brazil, Canada, South Korea, China and India. If you arrive from one of those countries, the notice appears and nothing is loaded until you answer.
In the United States and across the rest of Latin America and Asia the opposite model applies: measuring by default is allowed and what the law requires is a clear way to refuse. There you will not see the notice, and the way to refuse is this very page, linked in the footer of every screen.
If we cannot determine where you are arriving from — a VPN, a corporate proxy — you are shown the notice anyway. When in doubt, we ask.
And in any country, if your browser sends the Global Privacy Control signal, it is taken as a no and nothing is loaded. You don't need to repeat it here.
How to change your mind
Deleting the `cernoria-consentimiento` cookie from your browser settings brings the notice back and lets you answer differently. And in any case the notice returns on its own: after seven days if you declined, and after twenty-four months if you accepted.
Declining is one click, exactly like accepting, and the application works exactly the same either way. There is nothing behind accepting.
Third parties this notice does not cover
If you log in with Google, Google sets its own cookies at that moment, subject to its policy. The same with Microsoft if you connect Outlook. They are necessary for the sign-in you asked for and we have no control over them.
How to delete them
From your browser settings, at any time. If you delete the session ones, you are logged out of Cernoria and nothing else.