Política de cookies

What is set, and why

ke_lang

Remembers the language you chose, so a later visit opens in it. Set only when you use the language switcher — visiting a page in a language does not set it.

__Host-kolay_member

Your sign-in session as an applicant. Set when you sign in, cleared when you sign out. HttpOnly, so page scripts cannot read it.

__Host-kolay_admin

The same thing for programme reviewers. Only ever set on an administrator’s browser.

_ga, _ga_*

Google Analytics. Set only after you allow measurement, and never before: the Google script is not loaded at all until then. They hold a random identifier for your browser so that several pages in one visit are counted as one visit rather than several. They expire after two years, or as soon as you clear your browser’s cookies.

datafast_visitor_id, datafast_visitor_first_seen_at, datafast_visitor_session_count

DataFast, the second measurement service. Set only after you allow measurement, and never before: its script is not loaded at all until then. The first is a random identifier for your browser, the others the date it was first set and how many visits you have made. They expire after one year, or as soon as you clear your browser’s cookies.

datafast_session_id

The same service, for one visit rather than one browser. It expires after thirty minutes, which is what makes several pages read in one sitting count as one visit.

Session storage

While you are signed in, your browser also holds the access token and, during sign-in, a one-time verifier in session storage. Both are cleared when you close the tab. They are part of the sign-in mechanism, not a way of tracking you.

Measurement, if you allow it

We would like to know which pages, which languages and which ventures lead someone to apply. If you allow it, the site records that you opened a page, moved a filter, or reached a step of the application — with the page path, the language, and short tags like a sector name. There is no name, no email address and nothing from your CV in any of it, and none of it is joined to your application.

The measurement runs on Google Analytics 4. If you accept, Google’s script is loaded and sets the cookies listed above, which give your browser a random identifier — that is what lets two pages in one visit be counted as one person rather than two. Google processes this as our processor and may do so outside your country. Your address is used to derive an approximate location and is not stored by us. The link the site sends to Google carries the page path and, where present, the campaign parameters that brought you here; the filters you set on the matching page are stripped out of it first.

A second measurement service, DataFast, runs alongside it. If you accept, its script is loaded and sets the four cookies listed above: a random identifier that stays in your browser for a year, the date it was first set, a count of your visits, and a session identifier that lasts thirty minutes. Together they are what lets two pages in one visit be counted as one person rather than two. It is held behind the same button as Google and nothing is requested from it before you press that button. What it reports is lower than this site’s real traffic, because everyone who declines and everyone who never answers is missing from it.

Your answer is kept in your browser’s local storage under “ke:analytics-consent”, not in a cookie, and nothing is recorded before you give it. Saying no is one click and is remembered — neither script is then ever requested and no measurement cookie is ever set. Clearing your browser storage asks again. Measurement is off entirely unless this deployment has been configured for it, in which case you will have been asked.

What we do not set

There are no advertising cookies and no pixels. Google Analytics and DataFast are the only third-party scripts this site loads, neither is loaded before you allow it, and both are used for measurement alone — there is no advertising integration here. Nothing on this site follows you to another one, and nothing is sold or shared for advertising.

Controlling them

You can clear or block cookies in your browser settings. Blocking the language cookie only means the site stops remembering your language. Blocking the session cookies means you cannot stay signed in.