Cookie Policy
1. Introduction
This Cookie Policy explains how Recberry s.r.o. ("we," "us," "our," or "Recberry") uses cookies and similar tracking technologies on the Recberry Job Seeker Space platform (the "Service").
This policy should be read in conjunction with our Privacy Policy and Terms of Service. By using our Service, you consent to the use of cookies as described in this policy.
2. What Are Cookies
Cookies are small text files placed on your device (computer, smartphone, tablet) when you visit a website. They allow the website to recognise your device and store information about your preferences or past actions.
Types of cookies:
- Session cookies – Temporary; expire when you close your browser
- Persistent cookies – Remain until they expire or you delete them
- First-party cookies – Set by Recberry
- Third-party cookies – Set by external services integrated into our website
3. How We Use Cookies
3.1 Essential Cookies (Strictly Necessary) – Required for the Service to function; cannot be disabled.
Purpose: Technical functionality. Examples: Authentication (recberry_session); Session management; Security (CSRF protection); Load balancing. Legal basis: Legitimate interest. Consent: NO (exempt under ePrivacy Directive). Retention: Session or 30 days.
3.2 Functional Cookies (Optional) – Enhanced functionality and personalisation.
Purpose: User preferences. Examples: Language; Theme (light/dark mode); Remember selected options. Legal basis: Consent. Consent: YES. Retention: 12 months.
3.3 Analytics Cookies (Optional)
Purpose: Usage statistics and service improvement. Examples: Page views and user flows; Feature usage; Error tracking; Performance monitoring. Legal basis: Consent. Retention: 13 months. IP addresses anonymised. We use Microsoft Clarity (heatmaps, session recordings, insights) and may use Vercel Analytics if implemented.
3.4 Cookies We Do Not Use
We do NOT use: Advertising cookies; Social media tracking; Third-party behavioral tracking; Cross-site tracking; Retargeting or remarketing.
4. Third-Party Cookies
4.1 OAuth Authentication Providers – When you sign in with Google, GitHub, or LinkedIn, they may set cookies. Policies: Google | GitHub | LinkedIn
4.2 Payment Processor – Stripe may set cookies during payment (fraud prevention, processing). Policy
4.3 Hosting Provider – Vercel may set technical cookies for content delivery and load balancing (typically essential).
5. Cookies We Set
5.1 Authentication Cookies
recberry_session – User authentication and session management. Type: Essential (HTTP-only). Duration: 30 days. Domain: recberry.com. Path: /. Secure: Yes (HTTPS only). SameSite: Lax.
CSRF / security token – Protection against cross-site request forgery. Type: Essential. Duration: Session.
5.2 Consent Cookies
cookie-consent – Remembers your cookie preferences. Type: Essential (for tracking consent). Duration: 12 months. SameSite: Strict.
5.3 Functional Cookies (with consent)
theme-preference – Light/dark mode. Duration: 12 months.
language-preference – Language choice. Duration: 12 months.
5.4 Analytics Cookies (with consent)
_clck, _clsk (Microsoft Clarity) – Session recordings, heatmaps, and usage insights. Duration: 13 months. IP addresses anonymised. Microsoft privacy statement.
_va (Vercel Analytics, if used) – Anonymous usage analytics. Duration: 13 months. IP addresses anonymised.
6. Legal Basis for Cookies
6.1 Essential – Legal basis: Legitimate interest (Article 6(1)(f) GDPR). Consent: Not required (exempt under ePrivacy Directive Article 5(3)).
6.2 Non-Essential – Legal basis: Consent (Article 6(1)(a) GDPR). Consent: Required before setting. Obtained via cookie consent banner on first visit.
6.3 ePrivacy Directive – We comply with ePrivacy Directive 2002/58/EC as amended by Directive 2009/136/EC.
7. Your Cookie Choices
7.1 Cookie Consent Banner – On first visit you can: Accept all; Accept only essential; Customise preferences. Your choice is saved in the "cookie-consent" cookie.
7.2 Changing Preferences
- Method 1: Visit /cookie-settings (or cookie preference link on our site)
- Method 2: Browser settings (see below)
- Method 3: Clear cookies – preferences reset on next visit
7.3 Browser Controls
Chrome: Settings → Privacy and security → Cookies and other site data
Firefox: Settings → Privacy & Security → Cookies and Site Data
Safari (macOS): Preferences → Privacy
Edge: Settings → Cookies and site permissions
7.4 Mobile – Safari (iOS): Settings → Safari → Block All Cookies. Chrome (Android): Settings → Site settings → Cookies.
7.5 Consequences of Disabling – Essential: Service will not function (cannot log in). Functional: You may need to reconfigure preferences each visit. Analytics: We cannot improve based on usage patterns.
8. Do Not Track Signals
We honor Do Not Track (DNT) signals where technically feasible. DNT=1: We disable non-essential cookies and tracking. Note: No universal DNT standard, so behavior may vary.
9. Other Tracking Technologies
9.1 Local Storage – HTML5 localStorage for application state, cached data. Retention: Until manually cleared.
9.2 Session Storage – Temporary session-specific data. Cleared when tab closes.
9.3 Web Beacons / Pixels – We do NOT currently use. If implemented, we will update this policy.
9.4 Fingerprinting – We do NOT use device fingerprinting, cross-website tracking, or persistent identifiers without consent.
10. Data Retention
Essential: Up to 30 days. Functional: Up to 12 months. Analytics: Up to 13 months. Consent preferences: Up to 12 months. After expiration, cookies are deleted by your browser. You can delete anytime via browser settings.
11. Children's Privacy
Our Service is not directed at children under 16. We do not knowingly set cookies for children under 16. Parents/guardians can manage browser settings. Contact us if you believe a child has accessed our Service.
12. International Transfers
Cookie data may be transferred to the USA (OAuth providers, hosting) and other countries. Transfers protected by Standard Contractual Clauses, adequacy decisions, and your consent for non-essential cookies. See Privacy Policy.
13. Updates to This Cookie Policy
We may update to reflect changes in cookie usage, new features, legal/regulatory changes, or third-party updates. When we update: "Last Updated" date changes; material changes notified via email or website notice; continued use constitutes acceptance. We recommend reviewing periodically.
14. Your Rights
Right to Refuse – Refuse non-essential cookies via banner or browser settings.
Right to Withdraw Consent – Change settings in cookie preference center, delete cookies, or contact us.
Right to Information – Request information about cookies we use.
Right to Complain – File complaint with Czech data protection authority (ÚOOÚ). Contact: barbora@recberry.com
15. Cookie Compliance
This policy complies with: GDPR (Regulation EU 2016/679); ePrivacy Directive 2002/58/EC as amended; Czech Act No. 127/2005 Coll. (Electronic Communications); Czech Act No. 110/2019 Coll. (Personal Data Processing). We implement consent per EDPB Guidelines 05/2020, CJEU Planet49 (C-673/17), and ÚOOÚ guidance.
16. Contact Information
Email: barbora@recberry.com | Phone: +420 702 080 993 | Mail: Recberry s.r.o., Jana Zajíce 2016, 258 01 Vlašim, Czech Republic
Data protection: See Privacy Policy. Complaints: Úřad pro ochranu osobních údajů (ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7. https://www.uoou.cz | posta@uoou.cz
17. Definitions
Cookie – Small text file stored on your device by a website.
First-party cookie – Set by Recberry.
Third-party cookie – Set by external service.
Session cookie – Deleted when browser closes.
Persistent cookie – Remains until expiration or manual deletion.
HTTP-only cookie – Not accessible by JavaScript (security).
Secure cookie – Transmitted only over HTTPS.
SameSite – Controls when cookies are sent with cross-site requests.