This page explains the cookies and similar local-storage technologies that applymate.com uses, why we use them, and how you can control them. It accompanies the Privacy Policy.
1. What is a cookie?
A cookie is a small text file stored by your browser. We also use the related Web Storage APIs (localStorage, sessionStorage). For simplicity we refer to all of these as “cookies” on this page.
Cookies fall into two categories that matter for the law:
- Strictly necessary — without them the Service cannot function (for example, keeping you signed in). These do not require consent under EU/UK rules.
- Optional — analytics, marketing, personalisation. These require your consent in the EU/UK.
2. Cookies we currently use
ApplyMate currently uses only strictly necessary cookies. We do not load third-party advertising or analytics trackers.
| Name | Purpose | Type | Lifetime |
|---|---|---|---|
authjs.session-token /__Secure-authjs.session-token | Keeps you signed in. Set by NextAuth on successful login. | First-party, HttpOnly, Secure | 30 days (rolling) |
authjs.csrf-token | Cross-site request forgery protection on auth requests. | First-party, HttpOnly | Session |
authjs.callback-url | Redirects you back to the page you wanted after login. | First-party | Session |
applymate.cookie-consent (localStorage) | Remembers your response to the cookie banner so we don’t show it again. | First-party local storage | 12 months |
3. Cookies we may add later
If we introduce optional analytics or product-usage tracking, we will:
- Update the table above before turning them on.
- Show a consent banner that lets you accept or reject optional cookies. Your choice will be remembered until you change it from this page or by clearing your browser storage.
- Default to “reject” until you give explicit consent, in line with EU/UK ePrivacy and PDPA Singapore guidance.
4. How to manage cookies
- In ApplyMate: the cookie banner stores your choice in localStorage. Clearing site data from your browser will reset it and trigger the banner again on your next visit.
- In your browser:all major browsers let you view, block, and delete cookies. Search your browser’s help for “cookie settings”.
- Opt-out signals:we honour the Global Privacy Control (GPC) signal where supported. Sending a GPC header is treated as a request to opt out of any non-essential cookies and the “sale or sharing” of personal information.
Note: blocking strictly-necessary cookies will break sign-in. Without them you cannot use the authenticated parts of the Service.
5. Changes
We will update this page when we change our cookie usage. Material changes (e.g. introducing analytics) will be flagged through the cookie banner.
6. Contact
Questions: privacy@applymate.com