Cookie Policy

1. What are cookies

Cookies are small text files that websites send to a user's browser, where they are stored and sent back to the website on the next visit. This policy describes the cookies used by TalentyGo (operated by TalentyGo LLC, 30 N Gould St Ste N, Sheridan WY 82801, USA) in compliance with CalOPPA and the California Privacy Rights Act (CPRA).

2. Types of cookies used

Essential technical cookies (always active)

Required for site functionality. Consent not required.

• User session: JWT signed in HttpOnly cookie. Duration: 30 days. Purpose: keep user logged in.
• NEXT_LOCALE: stores the chosen language. Duration: 1 year. Purpose: display site in IT or EN.
• CSRF token: anti-forgery request token. Duration: session.
• tg_cookie_consent: remembers your cookie preferences. Duration: 1 year.

Analytics cookies (consent required)

Help us understand how users interact with the site (visited pages, errors, session duration). Aggregated and anonymized. Active only with your consent via the cookie banner.

• Cloudflare Workers Analytics: aggregate server-side, no fingerprinting, no PII. Retained 7 days.

Marketing / profiling cookies

Not in use at this time. If we activate them in the future (e.g. Meta retargeting / Google Ads), we will update this policy and request new consent.

3. Managing your preferences

On first visit you see a cookie banner with two equivalent options:

• Accept all — enables analytics cookies too.
• Reject non-essential — only essential technical cookies.

You can change your choice at any time by deleting the tg_cookie_consent key from your browser's localStorage (DevTools → Application → Local Storage → delete the key). The banner will reappear on next load.

California residents: you have the right to opt out of "sale" or "sharing" of personal information under CPRA. We do not sell or share personal data with third parties for cross-context behavioral advertising. To submit a CPRA request, email [email protected].

4. Cross-border data transfers

Some services we use (Cloudflare, OpenAI, Resend, Stripe) are based in the United States. Transfer of personal data is based on Standard Contractual Clauses (SCC) approved by the European Commission plus supplementary technical measures (TLS 1.3, encryption at rest). See the Privacy Policy for details.

5. Updates

We may update this Cookie Policy. Material changes will be notified by email to registered users and shown on the site. Last revision: June 2026.

6. Contact and rights

To exercise your rights or for cookie policy questions:

📧 [email protected]

📧 [email protected]

US residents may also file complaints with the FTC at ftc.gov or the California Attorney General at oag.ca.gov/privacy.