Cookie Policy
1. What cookies are
A cookie is a small text file a website asks your browser to store and send back on later requests. It is how a site recognises the same browser twice, which is what keeps you signed in from one page to the next, since the web itself remembers nothing between requests.
Cookies can be read only by the site that set them. A cookie with an expiry date stays until that date; one without an expiry date is a session cookie and your browser deletes it when you close it.
Websites also use other browser storage, such as local storage. It is not a cookie (the browser never attaches it to a request by itself), but it is covered here because from your side it is the same thing: data your browser keeps on your device.
2. What Trouvo sets
Everything below is set by Trouvo itself, including the analytics cookie: it is written by code running on this site, not fetched from someone else's server. There is no advertising network and no social widget here.
| Name | What it is for | How long it lasts |
|---|---|---|
| better-auth.session_token | Your sign-in session. It holds the identifier of the session created when you sign in, and it is the only way Trouvo knows a request is yours. Set only after you sign in. The browser cannot read it, since it is marked HttpOnly, and it is sent only on requests originating from this site (SameSite=Lax). Over HTTPS the same cookie is named __Secure-better-auth.session_token. Browsing does not renew it: its seven days run from the moment you signed in, whatever you do in between, so after seven days you sign in again. | 7 days from sign-in |
| NEXT_LOCALE | The language you are reading in. It holds a language code (en, es, de, fr, pt or uk) so a return visit opens in the language you last used. Set and updated as you browse. | Until you close your browser |
| AMP_… | Amplitude's identifier for your browser, used to count one person as one person across visits. The part after the underscore identifies our Amplitude project, not you. Set only after you accept analytics cookies, and never before. | 365 days |
The first two are strictly necessary: without the session cookie you cannot stay signed in, and the language cookie exists only to honour a choice you made in the product. Neither needs your permission. The Amplitude cookie is not necessary for anything, which is why you are asked first.
If you never sign in, the sign-in cookie is never set.
3. Analytics, and how you are asked
Trouvo uses Amplitude to understand how the product is used. Today that means three things you do: creating an account, signing in, and creating an interview briefing. The first two are recorded with the method you used (email, Google, Apple or LinkedIn) and with nothing else about what you were doing. The third records only that a briefing was created, and nothing else about it: not the company, the role, or the job description you wrote. There is no page-view tracking and no click tracking: Amplitude is configured to collect nothing of its own, so those three events are the whole of what we send it.
Each event carries technical details alongside it, and those are things you have not told us; someone who accepts before signing in has told us nothing else at all. They are: the identifier in the AMP_… cookie; your IP address, which Amplitude turns into an approximate location, country and city; the user-agent string your browser sends, which names the browser, its version and your operating system; the language your browser is set to; that you are on the web rather than in an app; and a session number that groups the events of one visit. We do not send your name, your email address, or anything you type into the product.
Nothing about it runs until you say so. On your first visit a card asks whether you accept analytics cookies. Accept and Decline sit side by side, the same size, and there is no way to close the card without answering one way or the other. Until you answer, the Amplitude code is not even downloaded: no request leaves your browser for it, and the AMP_… cookie in the table above is not set.
If you decline, that is remembered and you are not asked again. If you accept and later change your mind, the Cookie settings link at the bottom of any public page brings the card back; declining there stops the sending and deletes the Amplitude cookie from your browser.
Your decision is kept in your browser's local storage under cookie-consent,
described in the next section. It records what you chose and when, which is the
only way we can show that you were asked.
4. Local storage
Trouvo keeps two values in your browser's local storage, and Amplitude adds a third once you have accepted:
| Name | What it is for | How long it lasts |
|---|---|---|
| theme | Whether you chose the light theme, the dark theme, or the one your system prefers. It stops the page flashing the wrong theme while it loads. | Until you clear your browser's storage for this site |
| cookie-consent | Whether you accepted or declined analytics cookies, and when you decided. It is what stops the card asking you again, so clearing it means being asked once more. | Until you clear your browser's storage for this site |
| AMP_unsent_… | Amplitude's outbox. An event waits here between being recorded and reaching Amplitude, so that a failed request can be retried rather than lost; once a send succeeds the entry is emptied. Written only after you accept analytics cookies. | Until you clear your browser's storage for this site |
The first two stay on your device and are never sent to us. The third is a queue: whatever is sitting in it is on its way to Amplitude, and section 3 says what that is.
5. How to control cookies in your browser
You can see, delete and block cookies in your browser's settings. Look for "Cookies and site data" under Privacy in Chrome and Edge, "Cookies and Site Data" under Privacy & Security in Firefox, and "Manage Website Data" under Privacy in Safari. Every browser can also clear the local storage described above, usually with the same control.
Blocking or deleting the sign-in cookie signs you out, and Trouvo cannot keep you signed in without it. Deleting the language cookie simply means the site stops remembering your language. Deleting the Amplitude cookie makes your next visit look like a new browser to us; to stop it coming back, decline in the card the Cookie settings link opens.
6. Changes
We will update this page whenever Trouvo sets something new, or stops setting something listed here. The current version is always at this address, with the date it took effect at the top.
7. Contact
Write to support@ivmar.co with any question about this policy.
ivmar, Inc.