HireFoundry Cookie Policy

1. About this policy

This Cookie Policy explains how Fusemachines Inc. (“Fusemachines”, “we”, “us”) uses cookies and similar technologies on hirefoundry.ai and the HireFoundry web experience (the “Site”).

It sits alongside, and forms part of, the HireFoundry Privacy Policy, which describes how we handle personal information more generally. Where this policy uses terms defined there, they carry the same meaning. Where the two documents address the same subject, read them together; the Privacy Policy governs the broader handling of your information, and this policy governs the specific technologies described below.

Fusemachines Inc. is the controller responsible for the personal information collected through the technologies described here. You can reach us at Fusemachines Inc., 200 West 41st Street, 21st Floor, New York, NY 10036, USA, or at privacy@hirefoundry.ai.

2. What these technologies are

A cookie is a small text file that a site asks your browser to store and send back on later visits. Cookies let a site recognize a returning browser, remember a setting, or measure how a page is used.

We also use technologies that behave like cookies without being cookies, and this policy covers all of them. Local storage and session storage hold data in your browser in much the same way a cookie does, but the data is not automatically transmitted with every request and generally persists until it is cleared. Pixels and tracking beacons are small transparent images or snippets of code embedded in a page; loading one tells the server that issued it that the page was viewed, and can pass along information such as your IP address and browser type. Software development kits and tag managers are code libraries that load other technologies on our behalf, and we use Google Tag Manager to deploy and control several of the tools listed below.

Throughout this policy we use “cookies” as shorthand for all of these, and each entry below identifies which type it actually is.

3. Who sets them

First-party cookies are set by hirefoundry.ai itself. These include our own preference and consent records.

Third-party cookies are set by the companies whose tools we have chosen to run on the Site — for example our analytics, marketing, and customer-relationship providers. Those companies may receive information about your visit directly, and they process it under their own privacy policies as well as under our contracts with them. We list each provider below so you can review its practices and, where offered, use its own opt-out.

We do not permit third parties to set cookies on the Site for purposes we have not authorized, and we do not knowingly allow the Site to be used to build advertising profiles unrelated to HireFoundry.

4. Categories we use

We group cookies into four categories. These are the same categories you see in the Site’s cookie preference center, and your choices there map directly onto them. Each entry below lists the item, who sets it, what type it is, what it does, and how long it typically lasts.

4.1 Strictly necessary

These are required for the Site to function and to stay secure. They enable core navigation, protect our forms against automated abuse, balance server load, and record the cookie choices you have made. They cannot be switched off through the preference center, because the Site cannot be delivered safely without them. In most jurisdictions they do not require consent, though we still disclose them here.

• rd-cf-consentid — set by hirefoundry.ai (CookieFlow). Cookie. Identifier for your consent record, so your choices can be evidenced and honored. Up to 12 months.
• rd-cf-consent — set by hirefoundry.ai (CookieFlow). Cookie. Stores which categories you accepted or declined. Up to 12 months.
• rd-cf-region — set by hirefoundry.ai (CookieFlow). Cookie. Records the regional rule set applied to your session. Up to 12 months.
• rd-cf-basis — set by hirefoundry.ai (CookieFlow). Cookie. Records the legal basis applied, opt-in or opt-out. Up to 12 months.
• rd-cf-first-time, rd-cf-geo-cache, rd-cf-install — set by hirefoundry.ai (CookieFlow). Local storage. Supports banner display logic and caches the region lookup so it need not be repeated. Until cleared.
• __cf_bm and related — set by Cloudflare. Cookie. Bot management on our forms; distinguishes humans from automated traffic. Up to 30 minutes.
• Webflow session and hosting cookies — set by Webflow. Cookie. Site delivery, hosting, and form handling. Session to 12 months.

4.2 Analytics

These help us understand how the Site is used in aggregate — which pages are read, how visitors arrive, where journeys break down — so we can improve it. Where consent is required, these load only after you accept the analytics category.

• _ga — set by Google Analytics. Cookie. Distinguishes browsers so sessions can be counted. Up to 2 years.
• _ga_FD6C5M9GE4, _ga_JMHWJW0R4S — set by Google Analytics. Cookie. Maintains session state for each GA4 property we operate. Up to 2 years.
• __hstc — set by HubSpot. Cookie. Main HubSpot analytics cookie; records first visit, previous visit, and current session. Up to 6 months.
• hubspotutk — set by HubSpot. Cookie. Identifies a returning visitor and links them to contact records in HubSpot. Up to 6 months.
• __hssc — set by HubSpot. Cookie. Tracks the current session. 30 minutes.
• __hssrc — set by HubSpot. Cookie. Detects whether the browser session has restarted. Session.
• _clck — set by Microsoft Clarity. Cookie. Persistent identifier for aggregated usage analysis and session replay. Up to 1 year.
• _clsk — set by Microsoft Clarity. Cookie. Combines page views within a single session. 1 day.
• lastExternalReferrer, lastExternalReferrerTime — set by site scripts. Local storage. Records the external site you arrived from, for attribution reporting. Until cleared.
• hf_attr — set by hirefoundry.ai. Local storage. Our own attribution record — campaign parameters and the page and link that led you to a form — so we can tell which marketing efforts generate enquiries. Until cleared.

Fathom Analytics also runs on the Site. We selected it specifically because it measures traffic without setting cookies and without building cross-site profiles of individual visitors.

Microsoft Clarity may record a replay of your interactions with a page — mouse movement, scrolling, clicks — to help us diagnose usability problems. Clarity is configured to mask text you type into form fields. We do not use replays to identify individuals.

4.3 Marketing

These support advertising and campaign measurement, including on platforms outside the Site. They let us measure whether an advertisement led to a visit or an enquiry, and to show HireFoundry advertising to people who have shown interest. Where consent is required, these load only after you accept the marketing category.

• _gcl_au — set by Google. Cookie. Conversion linker; attributes a conversion to the advertisement that produced it. Up to 90 days.
• _gcl_ls — set by Google. Local storage. Supports conversion linking where cookies are restricted. Until cleared.
• _fbp — set by Meta. Cookie. Meta Pixel identifier; measures advertising performance and supports audience building. Up to 90 days.
• li_adsId — set by LinkedIn. Local storage. LinkedIn Insight Tag; measures campaign performance and supports audiences. Until cleared.
• bcookie, lidc, li_sugr, UserMatchHistory — set by LinkedIn. Third-party cookie. Set on linkedin.com when the Insight Tag loads; browser identification and advertising measurement. Session to 12 months.
• HubSpot advertising pixels — set by HubSpot. Pixel. Connects advertising activity to records in our CRM. Duration varies.

4.4 Personalization

These remember choices you make so the Site can adapt — for example a display preference, or content presented on the basis of your earlier activity. They are optional and load only after you accept the personalization category.

• custom_colors — set by hirefoundry.ai. Local storage. Remembers display preferences between visits. Until cleared.
• HubSpot content and chat personalization — set by HubSpot. Cookie and local storage. Tailors on-site messaging and, where enabled, chat continuity. Session to 13 months.

5. A note on durations and completeness

The durations above are the maximum lifetimes our providers publish, and the actual lifetime of a given cookie may be shorter. Providers change cookie names, purposes, and lifetimes from time to time, and we deploy some technologies through a tag manager, which means the exact set present on any given visit can vary with your consent choices, your region, and the page you are on.

We review this policy periodically and update it when the technologies we use change materially. If you find a cookie on the Site that is not described here, we would like to know: write to privacy@hirefoundry.ai and we will investigate and correct the policy.

6. Your choices

6.1 The preference center

The Site presents a cookie banner on your first visit, and a preference center you can reopen at any time from the link in the Site footer. There you can accept or decline the analytics, marketing, and personalization categories independently, see the choices currently recorded, and change them. Declining a category prevents the corresponding technologies from loading, and changes take effect immediately for future page loads.

Withdrawing consent is as straightforward as giving it, and withdrawal does not affect the lawfulness of processing that took place while your consent was in force.

6.2 Browser controls

Every major browser lets you view, block, and delete cookies, and most offer a setting to reject third-party cookies entirely. These controls are independent of ours and apply across all the sites you visit. The trade-off is that blocking cookies indiscriminately will break functionality on many sites, including parts of ours — most visibly, our record of your cookie choices, which is itself stored in a cookie.

Your browser’s help documentation explains where these controls live. Note that clearing cookies deletes our record of your preferences, so the banner will appear again on your next visit.

6.3 Global Privacy Control

We honor the Global Privacy Control signal. Where your browser or extension transmits a GPC signal, we treat it as a request to opt out of the sale and sharing of personal information and of targeted advertising, in the jurisdictions where that signal carries legal effect.

6.4 Provider-level opt-outs

Several of our providers offer their own opt-outs, which apply across every site using that provider. Google Analytics offers a browser add-on that prevents its measurement code from running, and Google Ads settings let you control ad personalization across Google’s services. Meta and LinkedIn each provide ad preference controls within their platforms. The Network Advertising Initiative and Digital Advertising Alliance operate consumer opt-out pages covering many advertising companies at once. These are third-party controls; we point to them as a convenience and do not operate them.

7. Legal bases and regional rights

7.1 European Economic Area and United Kingdom

We rely on your consent to store or access information on your device for the analytics, marketing, and personalization categories, and on our legitimate interest in operating a secure and functional website for the strictly necessary category. Consent is obtained before those technologies load, is granular by category, and can be withdrawn at any time through the preference center.

You have the right to access, correct, delete, restrict, and object to processing of your personal information, to receive it in portable form, and to lodge a complaint with your supervisory authority. The Privacy Policy explains how to exercise these rights.

Some of our providers process personal information in the United States and elsewhere outside the EEA and UK. Where that is the case, transfers are made under the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or another lawful transfer mechanism, together with any supplementary measures required.

7.2 United States

Depending on your state of residence, you may have the right to know what personal information we collect and how it is used, to access and delete it, to correct inaccuracies, to opt out of its sale or sharing and of targeted advertising, and not to be discriminated against for exercising those rights.

Some of the advertising technologies described above may constitute a “sale” or “sharing” of personal information, or processing for “targeted advertising”, under California, Colorado, Connecticut, Virginia, and comparable state laws — even though no money changes hands — because information is disclosed to advertising partners for their own advertising purposes. You can opt out through the marketing category in the preference center, by transmitting a Global Privacy Control signal, or by contacting us at privacy@hirefoundry.ai.

We do not knowingly sell or share the personal information of individuals under 16 years of age.

7.3 Other jurisdictions

Where you are located in Canada, Australia, or another jurisdiction with its own privacy legislation, we handle information collected through these technologies in accordance with applicable local requirements, and the controls described above are available to you regardless of where you are.

8. Children

The Site is directed at recruiting and talent professionals and is not intended for children. We do not knowingly use these technologies to collect information from children. If you believe a child has provided information through the Site, contact privacy@hirefoundry.ai and we will delete it.

9. Changes to this policy

We will update this policy when the technologies we use, or the law governing them, change materially. The “Last updated” date at the top reflects the most recent revision. Where a change materially affects your rights or the categories of information collected, we will seek fresh consent or provide prominent notice before the change takes effect.

10. Contact

Questions about this policy, or requests to exercise any right described in it, can be sent to info@fusemachines.com, or to Fusemachines Inc., 200 West 41st Street, 21st Floor, New York, NY 10036, USA.