Cookie Policy — Reqcore Help Center

Version: 1.0 Last updated: August 30, 2026

This page lists every cookie and local-storage entry the Reqcore websites and application use. It supplements the Privacy Policy.

In Norway, storing or reading information on your device requires your consent unless it is strictly necessary to deliver a service you asked for (ekomloven § 2-7b, implementing ePrivacy Art. 5(3)).

The short version

Nothing optional is loaded before you choose. If you decline, or simply never answer the banner, no request is made to PostHog or to Google, and nothing from them is stored on your device. This is enforced in code, not by a setting we ask a third party to respect.

1. Strictly necessary

These are set without consent because the Service cannot work without them. Legal basis: ekomloven § 2-7b second paragraph, and Art. 6(1)(b) or (f) GDPR.

Name	Type	Purpose	Duration
`better-auth.session_token`	HTTP-only cookie	Keeps you signed in. Without it every page load would log you out.	Session, or until sign-out
`better-auth.csrf`	HTTP-only cookie	Protects against cross-site request forgery on authenticated actions	Session
`reqcore-consent`	Cookie	Remembers your cookie choice (`granted` or `denied`), so we do not ask again. Shared across reqcore.com and app.reqcore.com. Storing this is what lets us honour your decision.	1 year
`reqcore_i18n_redirected`	Cookie	Remembers your language so you are not redirected on every visit	Session
`color-mode`	Local storage	Remembers light or dark theme	Until cleared

2. Analytics — only after you accept

Legal basis: consent, Art. 6(1)(a) GDPR.

Name	Provider	Purpose	Duration
`ph_*`	PostHog (EU)	Product analytics: which pages and features are used, so we can prioritise work. Your IP address is dropped from every event. No session recording, no autocapture, no form or keystroke capture.	Up to 1 year

PostHog runs on its EU instance (eu.i.posthog.com) and analytics requests are proxied through our own domain, so they are not blocked by tracker blockers — but they are still only sent after you accept.

3. Advertising measurement — only after you accept

Legal basis: consent, Art. 6(1)(a) GDPR.

Name	Provider	Purpose	Duration
`_ga`, `_ga_*`	Google Analytics	Distinguishes visitors so we can see which campaigns lead to signups	Up to 2 years
`_gcl_*`	Google Ads	Links an ad click to a later signup, so we know which ads work	Up to 90 days
`_gid`	Google Analytics	Distinguishes visitors within a day	24 hours

These apply to visitors and prospective customers on our marketing site and signup flow. They are never applied to candidates using a customer's job application form.

If you decline, the Google tag is not loaded at all — no googletagmanager.com request is made and none of these cookies are set.

4. Third-party features you choose to use

Name	Provider	Set when	Purpose
`endorsely_referral`	Endorsely	You arrive through an affiliate link and have accepted cookies	Credits the referring partner
Cal.com cookies	Cal.com	You open the demo booking page	Runs the scheduling page
giscus / GitHub cookies	GitHub	You comment on documentation	Authenticates you to comment

5. What we do not use

Session recording or screen replay
Autocapture of clicks, form inputs or keystrokes
Fingerprinting
Advertising cookies on candidate-facing job application pages
Selling or sharing data with data brokers

6. Changing your choice

In the app or on this site: clear the reqcore-consent cookie and reload; the banner will appear again.
In your browser: block or delete cookies for reqcore.com in your browser's privacy settings. Blocking strictly necessary cookies will sign you out and may break parts of the Service.
Withdrawing consent is as easy as giving it, and takes effect for future processing. It does not make past processing unlawful.

If you decline after previously accepting, we opt you out and clear the analytics storage created during your visit.

7. Questions

privacy@reqcore.com. You may also complain to Datatilsynet (datatilsynet.no), Postboks 458 Sentrum, 0105 Oslo.