Cookie policy
What we set, why we set it, how long it stays, and how to control it. Necessary cookies are the only thing we set without asking — analytics cookies load only after you accept them in the consent banner.
Last updated 2026-06-11
What cookies are
Cookies are small text files a website stores in your browser. Some are strictly necessary for the site to work (login, language preference, security). Others power analytics, marketing or third-party features and need your explicit opt-in under the EU ePrivacy Directive and GDPR.
Doris sets strictly necessary cookies without asking — login, language, security, and the cookie that remembers your consent choice. Analytics cookies (Google Analytics) load only after you click Accept in the consent banner. Your choice is stored for 12 months and revocable any time from the 'Cookie settings' link in the footer.
| Name | Purpose | Duration | Category |
|---|---|---|---|
| hireai_session | Authenticated session token (HMAC-signed). Tells the site you're logged in. | 7 days · expires on logout | Strictly necessary |
| hireai_jwt | Bearer token sent to the API for authenticated requests. Marked HttpOnly so JavaScript on the page can't read it. | 7 days · expires on logout | Strictly necessary |
| hireai_locale | Stores your language preference (es / en) so the site loads in the same language next time. | 1 year | Strictly necessary |
| hireai_cookie_consent | Remembers your cookie-consent choice (accepted or rejected) so the banner doesn't ask again. | 1 year | Strictly necessary |
Infrastructure cookies (e.g. Cloudflare's __cf_bm for bot mitigation) may be set by our hosting provider when applicable. Those are also strictly necessary under ePrivacy Art. 5(3).
Analytics cookies (only with your consent)
If you accept analytics in the consent banner, Google Analytics 4 sets the following cookies to measure how the site is used (pages visited, anonymous usage patterns). If you reject — or simply never choose — none of these load.
| Name | Purpose | Duration | Category |
|---|---|---|---|
| _ga | Google Analytics: distinguishes one visitor from another with a random client ID. Never contains your name or email. | 2 years | Analytics · opt-in |
| _ga_* | Google Analytics: keeps the measurement session state for our specific GA property (the * is the property's container ID). | 2 years | Analytics · opt-in |
How to control cookies
Every modern browser lets you view, block, or delete cookies from its settings panel. If you delete the Doris cookies, you'll be logged out and the site will load in the default language until you sign in again or pick one.
The consent banner
The first time you visit, a banner offers Accept and Reject at the same level — same size, same single click, no hidden reject. Until you choose, no analytics cookie loads. If you reject, we also delete any Google Analytics cookies already in your browser. You can change your decision any time with the button below or the 'Cookie settings' link in the footer.
Changes to this policy
If we change anything material — new cookie, new provider, new retention — we'll bump the date at the top of this page. The previous version stays accessible on request.
Questions?
Email hiredoris@looneydevs.com and we'll answer within 5 business days. If we don't, you can reach out to your local data-protection authority — for Spain, that's the AEPD.