Cookie Policy

This Cookie Policy explains how Deciml (a trading name of Birch & James Associates Limited, company no. 09549374; "we", "us", "our") uses cookies and similar technologies on our platform at deciml.io. It should be read alongside our Privacy Policy.

1. What are cookies?

Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device on subsequent visits and remember certain information about you. Similar technologies include local storage, session storage and pixels, which function in comparable ways.

2. How we use cookies

We use cookies and similar technologies for the following purposes:

2.1 Strictly necessary cookies

These cookies are essential for the Platform to function. They enable core features such as authentication (keeping you logged in), session management, and security (CSRF protection). You cannot opt out of these cookies as they are required for the Platform to operate.

• next-auth.session-token. Stores your authentication session, set by NextAuth.js
• next-auth.csrf-token. Protects against cross-site request forgery attacks
• next-auth.callback-url. Remembers where to redirect you after signing in
• deciml_ref. Set only when you arrive via a member's public-profile share link; remembers the referring handle for up to 30 days so the referral can be credited if you sign up. First-party, never used for advertising
• deciml_score_claim. Set only when you verify a GitHub or X handle with Run my match. It holds the provider, the handle, the role you picked and up to five post links you submitted, signed so it cannot be altered, and lasts 24 hours so the verified handle can carry over if you sign up. It is cleared when you sign up. First-party, httpOnly, never used for advertising
• deciml_scan. Set only when you open a member's card verification page and the scan is recorded. It holds an opaque reference to that scan record (no name, contact details or IP address) for up to 30 days so that if you sign up the member can be credited. It is cleared when you sign up. First-party, httpOnly, never used for advertising

2.2 Preference cookies

These cookies remember your preferences to improve your experience. On Deciml, we store preferences in your browser's local storage. This is not transmitted to our servers. The keys currently in use:

• theme and theme-explicit. Your chosen colour theme (dark or light mode)
• nav:collapsed. Whether the sidebar navigation is collapsed
• search_filters_open and search_verbatim. Your last search-panel layout and search mode (recruiter accounts)
• deciml:ats-view. Your preferred applicant-list view (recruiter accounts)
• v8-sound and v8-cursor. Whether you turned on interface sounds (off unless you choose) and the pixel cursor

2.3 Analytics cookies

We may use analytics tools to understand how visitors use the Platform. For example, which pages are visited most frequently and where users encounter errors. Any analytics we use are configured to anonymise IP addresses and not to track individuals across other websites. We do not currently use Google Analytics or any third-party advertising analytics.

3. Third-party cookies

Some third-party services integrated into the Platform may set their own cookies. These include:

• Vercel. Our hosting provider may set cookies related to CDN edge caching and deployment previews

We do not use third-party advertising cookies, social media tracking pixels, or retargeting cookies. We do not share cookie data with advertisers.

4. Your choices

You can control cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when cookies are set. Please note that disabling strictly necessary cookies will prevent you from logging in and using the Platform.

For guidance on managing cookies in common browsers:

• Chrome: Settings → Privacy and security → Cookies and other site data
• Firefox: Settings → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Manage Website Data
• Edge: Settings → Cookies and site permissions

5. Cookie consent

Strictly necessary cookies do not require your consent under applicable law (UK PECR and UK GDPR), as they are essential for the service you have requested. Where we use non-essential cookies, we will seek your consent before placing them. You can withdraw consent at any time by adjusting your browser settings or using the control below.

6. Changes to this policy

We may update this Cookie Policy from time to time to reflect changes in the technologies we use or in applicable law. The date at the top of this page indicates when it was last updated. We will notify you of material changes via email or a notice on the Platform.