Cookie policy
1. What cookies are
Cookies are small files that a website stores in your browser. We treat the browser's local storage (localStorage, IndexedDB) and similar technologies in the same way, so in this policy "cookies" means all of these. For cookies that are not strictly necessary for the website to function, we need your consent (Article 225 of the Zakon o elektronskih komunikacijah, the Slovenian Electronic Communications Act).
2. Categories and consent
| Category | Purpose | Consent |
|---|---|---|
| Strictly necessary | sign-in, security, payment, remembering your cookie and language choice | not required, always on |
| Analytics | counting visits, which pages and features work, and in the app also session recordings | required |
| Advertising | measuring whether our ads on Facebook, Instagram and Google lead to a registration or purchase | required |
Your choice on arsio.co also applies in the app at app.arsio.co when you open it from the same browser. If you make no choice, you are treated as not allowing analytics and advertising measurement.
3. The arsio.co website
| Name | Provider | Category | Purpose | Duration |
|---|---|---|---|---|
arsio_consent (local storage) | ARSIO | strictly necessary | your cookie choice | 12 months, after which we ask you again |
arsio_landing_touch (local storage) | ARSIO | advertising | ad link parameters (utm_*, fbclid, gclid), so that a registration in the app is attributed to the right ad | 90 days |
_ga, _ga_* | Google Analytics | analytics | distinguishing visitors and sessions | 2 years |
_fbp, _fbc | Meta Pixel | advertising | measuring the effectiveness of ads on Facebook and Instagram | 90 days |
Google Analytics is not loaded without consent. When you go from the website to the app, the link carries a Google Analytics identifier (_gl) so that the visit is counted as one, but only if you have consented to analytics.
4. The app.arsio.co app
| Name | Provider | Category | Purpose | Duration |
|---|---|---|---|---|
firebaseLocalStorageDb (IndexedDB) | Google Firebase | strictly necessary | keeping you signed in | until you sign out |
arsio:emailForSignIn, arsio:pendingRegistration | ARSIO | strictly necessary | completing sign-in via the email link | until sign-in is complete |
app-language | ARSIO | strictly necessary | app language | until deleted |
pinia-* | ARSIO | strictly necessary | progress in the onboarding questionnaire, CV and job ads during the session | 24 hours |
visitor_uid (in pinia-cv-storage), arsio:auth-last-active | ARSIO | strictly necessary | linking guest data to the account on registration, secure sign-out after inactivity | until registration / until sign-out |
arsio-daily-swipes, arsio-feedback-*, arsio-notifications-opt-in-*, arsio_checkout_started | ARSIO | strictly necessary | daily viewing limit, when we ask you for a rating or about notifications, unfinished purchase | until deleted |
pinia-cv-builder-storage, pinia-b2b-onboarding-storage, arsio:job-builder-*, arsio:prefill-job-from-document | ARSIO | strictly necessary | drafts you are filling in (manual CV, company sign-up, job ad) | until the process is complete |
arsio_visitor_seen, arsio_visit_logged | ARSIO | analytics | counting visits and new visitors to the app | until deleted / session |
arsio_first_touch, arsio_last_touch | ARSIO | advertising | first and last visit from an ad (link parameters), so that a registration is attributed to the right ad | 90 days |
__stripe_mid, __stripe_sid | Stripe | strictly necessary | secure payment and fraud prevention on the payment page | 1 year / 30 minutes |
_ga, _ga_* | Google Analytics (Firebase) | analytics | app usage | 2 years |
_clck, _clsk, CLID, MUID | Microsoft Clarity | analytics | session recordings and heatmaps: how you move around the app; a signed-in user is tagged with the account identifier, never with their name or email address | up to 1 year; recordings 30 days |
_fbp, _fbc | Meta Pixel | advertising | measuring registrations and purchases from ads | 90 days |
We write analytics and advertising keys in the app only after you have given your consent.
5. Server-side measurement
When you create an account or buy Plus, our server may report this to Meta and Google so that the ad that brought you is credited. In doing so, Meta receives a hashed email address, the account identifier, the IP address, the browser type and the _fbp/_fbc cookies. We do this only if, in the browser in which you registered or made the purchase, you have consented to advertising measurement [POTRDITI P30: danes se pošilja ne glede na izbiro].
6. Email
Notifications of new job ads and similar messages contain an invisible image and redirected links that tell us whether you opened the message and clicked. Sign-in links and the welcome email do not contain these. You can switch off this measurement by not loading images in your email program or by switching off notifications in Settings.
7. Managing your choice
- You can change your choice at any time in the cookie settings in the page footer or in the app's Settings.
- When you withdraw consent, we stop collecting new data; you can delete cookies that are already stored in your browser settings.
- You can also block cookies in your browser. Without the strictly necessary ones, you will not be able to sign in to the app.
8. Changes and contact
When we add a new tool or category, we update this policy and ask you for your choice again. How we process personal data is set out in the Privacy Policy. Questions: privacy@arsio.hr.