Cookie Policy

Every cookie and browser-storage item CareerStudioMax actually sets, and why.

Status of this document: a factual, code-level account of what's actually set in your browser — not a legal document reviewed by counsel. See the Privacy Policy for the broader picture of how we handle your data.

Where we're different from most sites: we don't use Google Analytics, Meta Pixel, or any third-party advertising/tracking cookie. Our own analytics only run if you say yes in the cookie banner, automatically respect your browser's Do Not Track signal, and never store your raw IP address — see "First-party analytics" below.

Strictly necessary cookies

These keep you signed in and the site functioning. They can't be switched off, since the site can't work securely without them.

Cookie	Purpose	Duration
cs_token	Your login session (JWT), httpOnly + secure — never readable by page scripts	7 days
nexus_token	Legacy login-session cookie, kept only for backward compatibility with older sessions; no longer newly set	7 days
connect.sid	Server session identifier, httpOnly + secure	7 days
cs_remember	Remembers your "stay signed in" preference	Set by your choice at login

Preference cookies

Remember choices you've made so we don't ask again every visit.

Cookie	Purpose	Duration
cs_consent	Records your cookie-banner choice (accept/reject optional cookies)	1 year
Language preference	Remembers your selected display language	1 year

Browser storage (localStorage)

Not technically cookies (never sent to any server automatically), but stored in your browser the same way. All first-party — nothing here is shared with or readable by another website.

Key	Purpose
cs_token / cs_user	Mirrors your signed-in state so the app UI can respond instantly without a network round-trip
cs_theme	Your light/dark theme choice
cs_cookie_consent	A local copy of your cookie-banner choice
cs_visitor_id	A random, pseudonymous ID used only for our own first-party analytics below — never sent to any other site, and not a cross-site tracking identifier

First-party analytics (optional, consent-gated)

Only active if you accept optional cookies in the banner, and only ever sent to our own servers — never a third party.

Consent-gated: pageview/event tracking only runs after you accept — reject or ignore the banner and it never fires.
Do Not Track respected automatically: if your browser sends a DNT signal, we skip analytics entirely, without needing you to interact with the banner at all.
No raw IP addresses stored: before anything touches our database, the last part of your IP is zeroed out and the result is one-way hashed with a salt — we can't reconstruct your original IP from what we store.
Auto-deleted after 90 days.
Both an accept and a reject are themselves logged as a record of your choice, so we can demonstrate consent (or the lack of it) was honored.

Managing your choices

Change your cookie preferences at any time — this reopens the same banner shown on your first visit:

You can also block or delete cookies entirely via your browser's own settings — strictly necessary cookies being blocked will prevent you from staying signed in.

Changes to this policy

We'll update this page if what we actually set in your browser changes. Since this document is generated from the real code and configuration, it stays accurate rather than going stale.

← Privacy Policy · Third-Party Data Sharing →

CareerStudioMax · Last updated 2026