Cookie Policy

This page describes the cookies and similar browser-storage items CareerPilot AI uses, what they're for, and how long they last. Short version: we don't use any third-party tracking or advertising cookies. Everything below is first-party and necessary for the product to work or to remember your preferences.

Strictly necessary

These keep you signed in and the app functional. They can't be disabled without breaking the service.

• next-auth.session-token (cookie, ~30 days) — your authenticated session. Set by Auth.js when you sign in. Removed when you sign out or it expires.
• next-auth.csrf-token (cookie, session) — anti-CSRF for sign-in forms.
• next-auth.callback-url (cookie, session) — remembers where to send you after sign-in completes.

Preference

These remember small UI choices so the app feels consistent across visits. Stored in your browser only.

• careerpilot:theme (localStorage) — light / dark / auto theme preference.
• careerpilot:sidebar-collapsed(localStorage) — whether you've collapsed the left navigation.
• careerpilot:plan-banner-dismissed(sessionStorage, current session only) — hides the "You're on the Free plan" banner once you dismiss it for this browsing session.

What we DON'T use

• No Google Analytics, Plausible, Mixpanel, Amplitude, or any other web analytics.
• No advertising cookies (Meta, Google Ads, TikTok pixel, etc.).
• No marketing-automation cookies (HubSpot, Marketo, Drift, Intercom, etc.).
• No session-replay tools (Hotjar, FullStory, LogRocket).
• No A/B testing platforms.
• No cross-site retargeting.

If we ever add any of these, this page will be updated before they go live and existing account holders will receive notice.

Third-party cookies set on our domain

When you sign in with Google, the Google OAuth flow briefly redirects to accounts.google.com. Cookies set during that redirect are Google's, governed by Google's Privacy Policy. They are not accessible to CareerPilot once you're back on our domain.

Managing your cookies

You can clear all CareerPilot cookies and local storage from your browser settings at any time. Doing so will sign you out, reset your theme preference, and expand the sidebar. Clearing cookies does not delete your account or any data stored on our servers — for that, use Settings → Delete account.

Browser-level Do Not Track

We don't serve any third-party content that would track you, so a "Do Not Track" signal from your browser has nothing to act on — there's nothing for us to disable.

Changes

Any change to our cookie usage will appear here with an updated "last updated" date at the top of this page.