RolePark Cookie Policy
This policy explains which cookies and similar browser storage RolePark uses on rolepark.com, what they are for and how long they last. Necessary cookies work without consent because the service cannot work without them; analytics cookies are set only after you accept them.
1. Necessary cookies
These cookies keep you signed in, protect sign-in flows and remember your language and your analytics choice. They are set by RolePark itself (first-party) and are not used for analytics or advertising.
| Cookie | Purpose | Lifetime |
|---|---|---|
| cadro_token | Session of a company user (staff); httpOnly, Secure, SameSite=Lax. | Until the session expires, by default 7 days, or until you sign out |
| cadro_candidate_token | Session of the candidate cabinet; httpOnly, Secure. | 30 days or until you sign out |
| cadro_candidate_session | Tells the page that a cabinet session exists, without the token itself. | 30 days |
| cadro_auth_state, cadro_auth_intent, cadro_portal_state, cadro_zoom_state, cadro_calendly_state | One-time protection of sign-in with Google and of connecting calendar and video integrations (OAuth state); httpOnly. | 10 minutes |
| locale, locale_chosen_at, locale_account | Interface language: your explicit choice, when it was made, and the language of your account. | 1 year |
| cadro_last_role | Which workspace (company or candidate cabinet) to open on the switch page. | 1 year |
| rp_consent, rp_consent_v | Your choice about analytics cookies (granted or denied) and which version of the banner text you answered. | 1 year |
2. Analytics cookies — only with your consent
With your consent we use Google Analytics 4 (Google Ireland Limited / Google LLC) on public informational pages only: the home page, product pages, pricing, methodology, calculators, FAQ, the AI-assistants page and the legal documents. Until you press “Accept”, the Google tag is not loaded and these cookies are not set. Consent covers analytics storage only: Google Signals, ad personalisation and advertising consent signals are turned off.
The tag never runs inside the company workspace or the candidate cabinet, on the job board, careers and vacancy pages, public profiles, sign-in and registration pages or pages opened with a link from an email. On the pages where it runs, the address has no parameters other than campaign tags `utm_*`, so Google receives no search terms, names or one-time links; the previous page is sent without parameters, and if it was not an informational page — only as rolepark.com. When you go from an informational page to a page without analytics, the page reloads without the Google tag. We send Google the event name and technical parameters (screen, language, role, section, sign-in method), never names, email addresses, candidate profiles, applications or files. Google may process the data in the United States.
With the same consent we use Microsoft Clarity (Microsoft Corporation) to see where people get stuck: it records the page layout, clicks, scrolling and the page address on the public informational pages, the registration and sign-in pages and, for companies registered within the last 14 days, the first screen of the workspace. All text and images on the recordings are masked before they leave your browser and what is typed into form fields is never recorded, so Microsoft receives no names, email addresses, candidate profiles or files. Clarity never runs elsewhere in the workspace, in the candidate cabinet, on job pages or on pages opened with a link from an email; addresses with parameters other than `utm_*` are not recorded. If you accepted analytics before we added Clarity, you will see the banner again, and Clarity starts only after a new choice. Microsoft may process the data in the United States.
| Cookie | Purpose | Lifetime |
|---|---|---|
| _ga | Distinguishes browsers for Google Analytics statistics. | Up to 2 years |
| _ga_* | Keeps the state of a Google Analytics session. | Up to 2 years |
| _gid, _gat* | Short-term Google Analytics identifiers and request limiting, if Google sets them. | Up to 24 hours |
| _clck | Distinguishes browsers for Microsoft Clarity recordings. | Up to 1 year |
| _clsk | Joins the page views of one visit into one Microsoft Clarity recording. | Up to 1 day |
3. Cloudflare
rolepark.com is served through Cloudflare (Cloudflare, Inc.), which protects the site from attacks and delivers it quickly. Cloudflare Web Analytics counts page views and loading speed without cookies and without storing your IP address in reports. Cloudflare may set its own strictly necessary security cookies (for example when it checks that a visitor is not a bot); they are described in Cloudflare’s cookie policy.
4. YouTube videos
The home page and the product page may include an embedded YouTube video (Google Ireland Limited / Google LLC). Until you press the play button, the page shows only an image served from rolepark.com: the YouTube player is not loaded, nothing is sent to Google and no cookies are set. After you press play, your browser loads the player from youtube-nocookie.com and, as with any YouTube player, sends Google your IP address, browser information and the page address; from then on Google may set its own cookies and similar storage and process this data under its own privacy policy, including in the United States. Pressing play itself is not sent to our analytics.
5. Browser storage
Some settings and working data are kept in your browser: in localStorage until you clear it, or in sessionStorage only for the current tab.
| Key | What it holds | Is it sent anywhere |
|---|---|---|
| recruit-flow-theme, recruit-flow-sidebar-collapsed, cadro.chat.sound, rp-celebrations, cadro.onboarding.dismissed.* | Interface theme, collapsed sidebar, chat sound, celebration animations, hidden onboarding tips (localStorage). | No |
| recruit-flow-session | A copy of your user profile without the sign-in token, so the workspace opens faster (localStorage). Cleared on sign-out. | No |
| cadro.savedVacancies, cadro.appliedVacancies | Jobs you saved or applied to on the job board (localStorage). | Saved jobs are merged into your cabinet account when you sign in to the cabinet |
| rolepark-push-endpoint | The push-notification address of this device (localStorage). | Sent to RolePark on sign-out so the server removes the subscription |
| rolepark.viewAsCompany | Which company a RolePark platform administrator is viewing (localStorage). | Sent to RolePark with that administrator’s requests |
| rp:link-token:* | The one-time token of a scheduling, signing or reference link, removed from the page address so it is not shared further (sessionStorage). | Sent to RolePark in a request header |
| cadro-vacancy-draft:*, rp:assessment-draft:* | Drafts of a new vacancy and of assessment answers (sessionStorage). | No; the answers are sent when you submit them |
| rp-taken-slots:*, rolepark.afterLogin, rp-chunk-reload | Interview slots already taken, the page to return to after sign-in, a mark used when part of the interface fails to load (sessionStorage). | No |
Nothing from browser storage is sent to third parties.
6. How to accept, decline or change your choice
- On your first visit a banner offers two equal buttons: “Accept” and “Decline”. Closing or ignoring the banner is not consent: analytics stays off.
- You can change or withdraw your choice at any time with the “Cookie settings” link at the bottom of this page, of the other legal pages, of the home page, of the sign-in pages and of the public job pages. After withdrawal we delete the Google Analytics and Microsoft Clarity cookies and stop sending data.
- You can also delete or block cookies in your browser settings. If you block necessary cookies, signing in will not work.
7. Changes and contacts
We update this policy when the list of cookies changes; the version and date are shown at the top. Questions: help@rolepark.com. How we process personal data in general is described in the Privacy Policy (https://rolepark.com/privacy).
Service operator
RolePark (the service operator at rolepark.com)
personal data enquiries: help@rolepark.com