SkillCort Legal
Cookie Policy
Which cookies are used on skillcort.com and its subdomains, for what purpose, and for how long.
This policy explains which cookies are used on skillcort.com and its subdomains, for what purpose, and for how long. Controller: SkillCort LLC (see the Privacy Policy).
This website (skillcort.com) sets no cookies
We audited our marketing website at code level: it sets no cookies and uses no local storage for tracking. Site measurement uses Vercel Web Analytics, which is cookieless — visitors are counted via an anonymized hash that automatically resets daily and cannot track you across days or across websites.
Because nothing requires consent, the small band you may see on your first visit is an informational notice only— it asks for no consent, and dismissing it stores a single value in your browser's local storage recording only that preference (exempt from consent, as it serves no other purpose). If we ever introduce a cookie that requires consent (e.g. marketing or non-essential analytics), we will replace it with a default-off, opt-in consent banner before that cookie is activated.
The assessment platform (app subdomains)
Staff surfaces use a small set of first-party, functional cookies — no advertising or cross-site tracking cookies anywhere on our domains. The candidate exam runtime sets no cookies at all: access is via a personal link, and the only client-side storage is a single local-storage value recording that you dismissed the privacy notice.
| Technology | Party | Purpose | Duration |
|---|---|---|---|
| sb-*-auth-token (+ .0/.1 chunks, and a temporary sb-*-code-verifier during sign-in) | First party (cookie) | Keeping staff signed in and securing the session (Supabase Auth, passwordless) | Up to 400 days (refreshed on use); the code-verifier only during sign-in |
| skillcort-org | First party (cookie) | Remembering which organization workspace you are working in | Browser session |
| sc_impersonation | First party (cookie) | Marks a platform-admin support session (shows the impersonation banner); staff/admin only | Until the support session expires |
| sc-nav-collapsed · builder-active-panel · sc-privacy-ack · skillcort-cookie-notice-dismissed | First party (local/session storage) | Interface preferences and notice dismissals — no tracking | Persistent (preferences) / tab session (builder panel) |
The auth and workspace cookies are strictly necessary for the service you explicitly request (signing in, managing or taking an assessment) and are therefore exempt from consent under the Turkish DPA's Cookie Guideline and the ePrivacy framework.
Third-party content inside assessments
If an assessment author embeds a video (YouTube, Vimeo, Loom, Dailymotion, Streamable, Wistia or Google Drive) inside question content, that provider's player loads in your browser and may set its own cookies under its own policy. During a live AI interview, your browser additionally opens real-time connections to our AI subprocessors (OpenAI for speech, HeyGen/LiveAvatar for the interviewer avatar) — these connections carry the interview itself and are disclosed on the consent screen before you start; they are service delivery, not advertising or tracking.
Managing cookies
You can delete or block cookies in your browser settings at any time; blocking the strictly necessary platform cookies will prevent sign-in and assessments from working. Any change to this inventory will be published on this page before it takes effect.