Cookie Policy

01Strictly necessary

A session cookie keeps you logged in as a recruiter or, separately, as a candidate on your country's Expertini account — without it, the ATS and the application flow simply don't function. These cannot be disabled without breaking login.

02Security

A CSRF-protection token and rate-limiting cookies help prevent cross-site request forgery and abuse of public endpoints like the lead and application forms. Also strictly necessary.

03Analytics

Google Analytics sets first-party cookies (names beginning `_ga`) to tell a returning visit from a new one and to measure how pages and features are used. These run on the public pages and inside the signed-in recruiter interface. They are not strictly necessary — the ATS works perfectly well without them — which is why this is a category you are asked about rather than told about.

What analytics sees is navigation and device data: pages viewed, referrer, browser, approximate location derived from IP. It is never given the contents of a CV, an application, an interview note, or any candidate record, and no candidate or recruiter identifier is sent to it.

04Advertising — Google AdSense

Expertini ATS carries advertising from Google AdSense, which is the only advertising network used anywhere in the Expertini family. Ad revenue funds the free and lower-cost tiers of this product.

Where ads appear, Google may set its own cookies to limit how often you see the same ad, to measure whether an ad led to a visit, and to detect invalid traffic. Google documents these on its advertising technologies page.

**Ads are never shown to Professional, Business or Enterprise subscribers.** Those plans are sold as ad-free, and the check that enforces it runs before any ad code is placed on the page. Free Pass, Trial, Starter and Growth accounts do see ads.

**Advertising cookies are not set before you agree, anywhere prior consent is required.** If you are visiting from the EU/EEA, the UK or Switzerland, advertising storage, advertising user data and ad personalisation all start refused, and stay refused until you accept — the same banner that asks about analytics asks about this. Elsewhere they start on and you can switch them off at any time from the same Cookie settings link. A browser-level Global Privacy Control signal is honoured automatically as a refusal.

If you decline, ads may still appear, but they are non-personalised: chosen from the page's own context rather than from anything about you.

05What advertising never gets

No candidate data reaches the ad network. Ads are not rendered on pages that display a CV, an application, an interview note, an assessment or a candidate record, and no candidate or recruiter identifier, email address, CV content or pipeline detail is passed to Google's ad systems.

Ads are also not shown in the candidate application flow.

06Managing cookies

The strictly necessary and security cookies can't be turned off — blocking them in your browser simply prevents login from working. Analytics is the one thing you can decline, and declining it costs you nothing in the product.

If you're visiting from the EU/EEA, the UK or Switzerland, analytics and advertising both stay switched off until you accept — a short banner asks on your first visit, and nothing beyond the strictly necessary cookies is set before you answer. Elsewhere both start on and you can switch them off at any time. Either way we honour a browser-level Global Privacy Control signal automatically: if your browser sends one, we treat it as a refusal and don't even ask.

Your choice is remembered for 180 days in a single first-party cookie, and you can change it whenever you like — the "Cookie settings" link in the footer of this page reopens the same choice, wherever in the world you are, and applies across the whole product including the signed-in dashboard.