Cookie Policy
Effective 30 April 2026 · Shine AI Ltd · UK PECR & UK GDPR compliant.
We use the minimum amount of storage needed to keep Shine running. Anything beyond that — like analytics or marketing — only happens after you say yes. You can change your mind at any time using the button below.
1. Strictly necessary
These keep the site secure and working. They don't need consent under UK PECR.
| Name | Purpose | Duration | Type |
|---|---|---|---|
| sb-* (Supabase auth) | Keeps you signed in and your session secure (issued by our backend, Supabase). | Session / up to 1 year | First-party |
| shine.cookie-consent | Remembers your cookie choices so we don't ask again. | Up to 12 months | First-party |
| shine.onboarding.step.* | Remembers where you left off in candidate onboarding so you can resume. | Until cleared / sign-out | First-party |
| shine.role-form-autosave.v1:* | Auto-saves a draft of a role you're creating so you don't lose work. | Until you publish or discard the draft | First-party |
| shine.business.archivedRoleIds | Remembers which roles you've archived from your employer dashboard. | Until cleared | First-party |
| shine.reverseGeocodeCache.v1 | Caches recent location lookups so the location picker is faster. | Up to 30 days | First-party |
| sidebar:state | Remembers whether the navigation sidebar is open. | 7 days | First-party |
| Stripe (m, __stripe_*) | Set only on checkout pages by Stripe to detect fraud and process card payments securely. | Session up to 1 year | Third-party |
2. Preferences (off by default)
Functional storage you opt into — for example saved filters or layout choices.
No preference cookies are currently set. We'll list them here and re-ask for your consent before adding any.
3. Analytics (off by default)
Anonymous data so we can see which pages help and which don't. Only set if you opt in.
| Name | Purpose | Duration | Type |
|---|---|---|---|
| ph_*, __ph_opt_in_out_* | PostHog (EU) — product analytics and anonymised session recordings. Inputs and sensitive content are masked. Helps us see where users get stuck and improve Shine. Only set if you opt in to Analytics. | Up to 1 year | Third-party |
4. Marketing (off by default)
Used by ad platforms to measure campaign effectiveness. Only set if you opt in.
We don't currently use marketing cookies. We'll update this list and ask for your consent again before we add any.
5. Third-party services
We rely on a small number of processors that may set their own cookies or storage as part of delivering core functionality. They are listed in the table above and described here so you know who's involved:
- Supabase — our backend (authentication, database). Sets
sb-*session cookies on your behalf so you stay signed in. Supabase privacy. - Stripe — payment processor for employer subscriptions. Stripe sets cookies on the embedded checkout page only, used to detect fraud and complete payment. Stripe privacy.
- Google (sign-in only) — if you choose "Continue with Google" on signup or login, Google sets its own cookies on its login page. Shine does not embed any Google tracking on its own pages. Google privacy.
- Hosting & CDN — our hosting and CDN providers may set short-lived cookies for security and load balancing. These are essential and not used for tracking.
We do not currently load any analytics, advertising or social-media tracking scripts on Shine. If we ever add one, this page will be updated and the consent banner will ask you again before anything is set.
6. Your consent record
When you make a choice in the consent banner we keep a short audit record so we can prove your decision if asked. This record contains: which categories you accepted or rejected, the policy version, the page you were on, an anonymous browser id (or your account id if you're signed in), your browser's user-agent, and the timestamp. We keep it for as long as your consent is valid (up to 12 months) and use it only to demonstrate compliance with UK GDPR and PECR.
7. Your choices
You can accept, reject or customise non-essential cookies at any time using the button above. You can also clear cookies in your browser settings. Refusing non-essential cookies won't stop you using Shine.
Read our Privacy Notice for the full picture, or email contact@shineai.tech with any questions.