Cookie Policy

Cookies are small files your browser stores. We also store a few values in the browser’s local storage, which stays on your device but is not sent with every request in the way a cookie is.

These are set so you can sign in and complete Google or LinkedIn sign-in. The Services cannot keep you signed in without them. They are not used for advertising.

• gsj_at — access token for a signed-in session. Expires after 15 minutes. Not readable by page scripts.
• gsj_rt — refresh token so you stay signed in. Expires after 7 days. Not readable by page scripts.
• gsj_oauth_return — returns you to the correct page after Google or LinkedIn sign-in. Expires after 10 minutes.
• OAuth session cookie — used only during the Google or LinkedIn sign-in handshake. It ends when the browser session ends.

A cookie bar asks before the visitor cookie and analytics run. Reject and Accept are presented with equal weight. gsj_consent records that choice, including Reject. It lasts 180 days, page scripts can read it, and the server uses it to decide whether a visitor id may be stored.

gsj_vid is a random visitor identifier that lasts for one year. It is set only after you choose Accept and is cleared if you choose Reject. We use it to count a collection page, job or course once per person per day. It is not used for advertising, and page scripts cannot read it.

You can remove gsj_vid in your browser settings. A new identifier is created the next time you open a collection page, job or course after choosing Accept. A click from a course to a university site can be counted without that cookie and without storing a visitor identifier where analytics has not been accepted. Opening a company or university profile can also be counted without a visitor identifier.

Google Analytics 4 and PostHog load only after you choose Accept on the cookie bar. We do not use PostHog session recording, and PostHog automatic click capture is off. Google Analytics is configured to anonymise IP addresses, not to use advertising storage, and not to send a page view until our own page-view call runs.

Under the current implementation, we do not send Google Analytics or PostHog your name, email address, telephone number, CV, cover note, salary or diversity information. PostHog is configured to use the EU ingest host and may recognise a signed-in user who has accepted analytics by an account identifier, together with whether the account was migrated and whether onboarding is complete, rather than by an email address. Google Analytics is operated by Google and may process this analytics information outside the United Kingdom. The Privacy Statement explains the safeguard for that transfer.

Some activity may still be recorded as part of operating your account even if you reject analytics, for example applications and other records needed to provide account and recruitment functionality. This is separate from optional analytics tracking.

• gsj_cid — a random browser id, created only after Accept, lasting 180 days. Page scripts can read it.
• gsj_attr — campaign and referrer details from the page you are on when analytics is allowed. Stored only after Accept, for 30 days, and only when there is a campaign or referrer to store.

We do not currently use marketing or advertising cookies or third-party advertising pixels. Email marketing is covered by our Privacy Statement and, where consent is required, is off unless you opt in.

The following information may sit in local storage on your device. Clearing site data removes these values.

• Your last job search, recent searches and filter choices, including where you are not signed in.
• Your email address for up to 30 minutes while a new account waits to be verified.
• gsj:analytics-consent and gsj:analytics-consent-at — your Reject or Accept choice and when you made it. They are set only after you choose on the cookie bar. If gsj:analytics-consent is missing or is anything other than true, analytics stay off.
• An older sign-in token, if one is still present, read once so it can be moved into the current sign-in cookies.

We use Sentry for error reports. It starts when error reporting is switched on and does not wait for the cookie choice. The current browser setup does not enable performance tracing or session replay, and this product does not configure Sentry to set its own cookie or a local-storage identifier. This monitoring is separate from Google Analytics and PostHog. Sentry may process error reports outside the United Kingdom. The Privacy Statement explains the basis and the transfer safeguard.

Cookie settings in the footer reopens your analytics choice. You can also use your browser to block or delete cookies and site data. Blocking the sign-in cookies will sign you out. Blocking or deleting gsj_vid stops the visit count for that browser until a new identifier is created after analytics is accepted again.

We may update this Cookie Policy to reflect changes to our Services, technology, cookie practices or legal requirements. Where appropriate, we will bring material changes to users’ attention. The version and effective date shown at the top indicate when this Policy was last updated.

Questions about cookies or privacy can be sent to privacy@globalsportsjobs.com.