Cookie Policy
Last updated: October 2026
Short version: SpotApply uses one cookie and some browser storage, all of it needed to keep you signed in and to remember choices you make. We use no analytics, advertising or tracking cookies, no third-party cookies, and no session-recording tools. Because everything listed here is strictly necessary for the service you ask for, there is nothing to switch off — the notice you see on your first visit tells you this and links here.
1. The cookie we set
| Name | What it does | How long |
|---|---|---|
sb_token | Your sign-in session, so pages you open while signed in know it is you. Sent only to app.spotapply.ai, only over HTTPS. | 1 hour (renewed while you use the app); removed when you sign out |
2. Browser storage we use
Your browser's local storage keeps these on your own device. They are not sent to anyone else.
| What | Why |
|---|---|
Sign-in session (sb-…-auth-token, sb_token, sb_refresh) | Keeps you signed in between visits. Set by our sign-in provider, Supabase. |
Your settings (hp_theme, hp_sb_collapsed, hp_shortlist_sort, hp_shortlist_minscore, hp_open_tab) | Remembers the theme, sidebar, sort order and filters you chose. |
Things you dismissed or finished (hp_tour_v1_done, hp_onboarding_dismissed, hp_welcome_done_closed, hp_ext_dismissed, hp_ext_installed, sa_cookie_notice_v1) | So we don't show you the same tip, tour or notice again. |
Short-lived page state (pending_toast, hp_highlight_app, hp_reloaded_for_auth, hp_auto_reload_ts, hp_identity_synced_at, jb_post_discover, hp_temp_role, hp_temp_resume) | Carries a message or a choice from one page to the next, or stops a page reloading twice. |
Referral code (ja_ref) | If you arrive through a friend's referral link, keeps their code until you sign up so the referral can be credited. |
| App files cache (service worker) | Keeps copies of our own stylesheets, icons and scripts so pages load faster. Contains no personal data. |
3. Third parties
No third party sets cookies through our website. Our fonts and page assets are served from our own servers. Payments happen on Stripe's own checkout page, which has its own cookie policy; signing in with Google takes you to Google's page, which has its own.
4. Your choices
You can delete cookies and site data at any time in your browser's settings. If you do, you will be signed out and your on-device settings will reset. If we ever want to add an optional cookie, such as analytics, we will ask for your permission first and update this page.
5. Contact
Questions? Email privacy@spotapply.ai. See also our Privacy Policy.