Cookie Policy
Every cookie and browser storage item this website uses, why it is there and how long it stays. Nothing optional is used until you agree.
1. What this policy covers
Cookies are small files a website keeps in your browser. Local storage and session storage are similar places in your browser where a page can keep a little data. This policy covers the public website and your account pages. It does not cover the desktop app, or the payment provider's checkout pages, which have their own policies. How we handle personal data in general is in the privacy policy.
2. Your choice
We use two kinds of cookies and storage. Strictly necessary ones make the site work (signing in, the steps of a sign-in, remembering a referral link you opened and your cookie choice); they are always on. Optional ones are analytics and marketing. They are off until you turn them on.
On your first visit a banner asks for your choice. You can accept all, reject all, or choose each category under “Manage preferences”. Until you accept a category, its scripts are not loaded at all, so they set no cookies and receive nothing from your browser. If you do not answer, nothing optional is used.
You can change your choice at any time with “Cookie settings” at the bottom of every page, or here:
When you turn a category off, the website removes that category's cookies from your browser and reloads the page, so its script stops. Your choice is kept for about 6 months. We ask again after that, or sooner if we add a new kind of optional cookie. You can also delete cookies and site data in your browser's settings. The website then asks for your choice again.
3. Strictly necessary
These need no consent because the site cannot work as you asked without them. None of them is shared with anyone.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
lc_session (cookie) | AI Interview Assistant (first party) | Keeps you signed in. Encrypted, and readable only by our server (HttpOnly): page scripts never see it. | As long as your sign-in lasts, at most 400 days; removed when you sign out |
lc_mfa (cookie) | AI Interview Assistant (first party) | Carries a staff sign-in from its first step to the authenticator-app step. Encrypted, HttpOnly, sent only to the sign-in routes. | Up to 15 minutes |
lc_social (cookie) | AI Interview Assistant (first party) | Holds the random value that ties a Sign in with Google attempt to this browser. Encrypted, HttpOnly, sent only to the Google sign-in route. | Up to 1 hour, removed when it is used |
lc_desktop (cookie) | AI Interview Assistant (first party) | Holds a sign-in handed over from the desktop app until you confirm it in the browser. Encrypted, HttpOnly. | Up to 5 minutes |
luma_ref (cookie) | AI Interview Assistant (first party) | Remembers the code of a customer’s referral link you opened, so an account you create is recorded as referred. Holds only the code. HttpOnly. | About 60 days, removed when your account is created |
luma_consent (cookie) | AI Interview Assistant (first party) | Remembers your cookie choice: whether analytics and marketing are on, and when you chose. | About 6 months |
aia-promo-dismissed (session storage) | AI Interview Assistant (first party) | Remembers that you closed the announcement bar at the top of the page. | Until you close the browser tab |
Whether the referral link cookie (luma_ref) counts as strictly necessary, or needs your consent, must be finalized by counsel.
4. Analytics (optional)
With analytics on, the website loads Google Tag Manager, which loads Google Analytics and Microsoft Clarity. Google Analytics records which pages you open, how you use them (for example scrolling, clicks on links that leave the site, downloads, form use and video plays) and where you came from, together with technical details of your browser and device. Microsoft Clarity records how you use each page (clicks, mouse movement, scrolling and the page as it was shown to you) as session recordings and heatmaps; it receives the Google Analytics ids of your visit, so the two can be matched. Google's and Microsoft's servers also see your IP address. We use them to understand how the site is used and to improve it. Google's Consent Mode is set so that Google's advertising storage stays off whatever you choose. How Google and Microsoft handle this data is set by their own terms and privacy policies.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_ga (cookie) | Google (Google Analytics), set in our domain | Tells visits from the same browser apart, so visits and pages can be counted. | 2 years (Google’s default) |
_ga_JC509WEFCP (cookie) | Google (Google Analytics), set in our domain | Keeps the state of the current visit for our Google Analytics property. | 2 years (Google’s default) |
_clck (cookie) | Microsoft (Clarity), set in our domain | A random id for your browser, so Clarity can tell visits from the same browser apart. | 1 year (Microsoft’s default) |
_clsk (cookie) | Microsoft (Clarity), set in our domain | Joins the pages of one visit into one Clarity recording. | 1 day (Microsoft’s default) |
Microsoft Clarity may also set cookies in its own domain (clarity.ms), which we cannot read or remove. The cookie durations shown are Google's and Microsoft's defaults; the durations set for our property and project, and which page content Clarity masks in its recordings, must be confirmed and published here before public launch.
5. Marketing (optional)
With marketing on, the website loads the tracking script of Affitor, the affiliate tracking provider we use to credit partners who recommend AI Interview Assistant. If you arrived through a partner's link and then create an account, the website tells Affitor your account's internal id and email address once, so the partner can be credited. With marketing off, this is not sent. More detail is in section 6 of the privacy policy.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
affitor_visitor_id (cookie) | Affitor, set in our domain | A random id for your browser, so Affitor can link visits and a sign-up to the partner who referred you. | 365 days |
affitor_session_id (cookie) | Affitor, set in our domain | A random id for the current visit. | 30 minutes, renewed while you browse |
affitor_session_src (cookie) | Affitor, set in our domain | Where the current visit came from (the link’s source tags and the referring site), so it is reported once. | 30 minutes, renewed while you browse |
affitor_click_id (cookie) | Affitor, set in our domain | Only if you arrived through a partner’s link: the id of that click. | 60 days |
affitor_aff_url (cookie) | Affitor, set in our domain | Only if you arrived through a partner’s link: the partner link you opened. | 60 days |
affitor-signup:<account id> (local storage) | AI Interview Assistant (first party) | Records that a new account’s sign-up was reported to Affitor from this browser, so it is never reported twice. Holds the date only. | Until you clear this site’s data in your browser |
Affitor's cookies are written in our site's own domain by Affitor's script. The names and durations above were read from that script on 29 October 2026; Affitor can change them. How long Affitor keeps the data it receives must be finalized by counsel.
6. Sign in with Google
When Sign in with Google is offered on the sign-in page, that page loads Google's sign-in script from accounts.google.com so the button can work. Google may read and set its own cookies, in Google's own domains, when the script loads and when you use it; we cannot read or remove those. The script may also set a cookie named g_state in our domain, which records the state of Google's sign-in prompt in this browser. Whether loading this script needs your consent before you choose Google must be finalized by counsel.
7. Changes
We update this policy when the cookies the website uses change. Last updated 29 October 2026.