Cookie Policy

This Policy explains the cookies and similar browser storage used by the Palm Access website and the Palm Access Job Market. The Job Market is currently served from the same application as the main website, so unless stated otherwise everything described here applies to both.

A cookie is a small file a site stores in your browser and reads back on later requests. This Policy also covers technologies that are not technically cookies but do the same job, such as local storage.

It sits alongside the Privacy Policy, which explains more broadly what personal data we collect and why.

These cookies are required to operate the service and to keep you signed in. They are set only once you sign in or create an account, they are not used to profile you, and they cannot be switched off while you are using an account.

• palm_access — carries your signed-in identity so pages can be rendered for you on the server. Its lifetime follows the lifetime of the session token it holds, which is short by design.
• palm_refresh — lets your session be renewed silently so you are not signed out mid-task. Expires after 7 days.
• palm_sanctum — used to sign you out properly with the Palm Access identity provider. Expires after 7 days.

All three are set with the HttpOnly flag, which means the website's own scripts cannot read them, and they are restricted to Palm Access. Signing out clears all three.

When you answer the cookie banner or save your preferences, Palm Access stores that answer in a cookie so it does not have to ask you again on every page.

• palm_consent — records which optional categories you allowed and which you refused, together with the date of your answer. It holds a setting, not an identifier: it contains no account, no name and nothing that identifies you personally. Expires after 180 days, after which you are asked again.

While this cookie is absent — on a first visit, or if you clear it — no optional category is treated as allowed: nothing beyond the necessary cookies is used, and no advertising technology is loaded. The same applies if its contents cannot be read or are older than the period above.

You can change the answer it holds at any time through the "Manage cookies" link in the site footer, or delete it through your browser as described below.

How this cookie itself should be classified is under review, and this Policy will be updated when that is settled.

These remember interface choices you have made so the page renders correctly on first paint rather than correcting itself afterwards. They hold a setting, not an identifier, and they are not shared with anyone.

• palm-dashboard-theme — whether you chose the light or dark interface. Stored as a cookie for up to one year, and mirrored in your browser's local storage.
• palm-sidebar-collapsed — whether you collapsed the dashboard sidebar. Stored as a cookie for up to one year, and mirrored in your browser's local storage.
• palm-dashboard-language — your chosen interface language. Stored in your browser's local storage.

Whether these are treated as strictly necessary or as a separate category you can refuse is under review, and this Policy will be updated when that is settled.

The CV builder and the recruitment form on the public Job Market page save what you have typed into your browser's local storage, so that a reload or an accidental navigation does not lose your work. This data stays in your browser, is not sent anywhere by that mechanism, and is not used for tracking. You can clear it at any time through your browser settings.

Palm Access does not currently operate any web analytics or audience-measurement product. There is no Google Analytics, Google Tag Manager, or comparable tool on the platform. Should that change, this Policy will be updated first.

Palm Access currently runs the Meta Pixel, provided by Meta, on its website. It is used for advertising measurement, conversion attribution and audience building for campaigns run on Meta's platforms, and it is the only advertising or tracking technology on the platform today.

The pixel is supplied and controlled by Meta, which sets its own cookies and identifiers in your browser. Because that code is delivered and updated by Meta rather than by us, the authoritative description of what it stores, for how long, and how Meta uses it is Meta's own privacy and cookies documentation.

The pixel is loaded only if you have allowed the Marketing category. If you have not made a choice, or you refused Marketing, the pixel is not placed on the page at all: its script is absent, nothing is requested from Meta, and no Meta identifier is created. A choice you make takes effect from your next page load.

Every major browser lets you see the cookies a site has stored, delete them, and block cookies for a site entirely. These controls are available to you today and work independently of Palm Access. They are usually found under Settings, in a section named Privacy, Security, or Site data.

Blocking or deleting the strictly necessary cookies listed in section 2 will sign you out and will prevent you from signing back in until you allow them again. Blocking preference storage will not stop the service from working, but the interface will not remember your theme, layout or language.

Palm Access also provides its own controls. On your first visit a banner lets you accept all optional categories or refuse them in one click. The "Manage cookies" link in the site footer opens a preferences panel where each optional category can be switched on or off individually and saved. You can reopen it and change your choice at any time. Necessary cookies are not listed there as a choice, because the service cannot run without them.

We may update this Policy as the technologies we use change. The effective date above always reflects the current version, and material changes to advertising or analytics will be reflected here before they take effect.

Questions about this Policy can be sent to privacy@palm-access.com.