Cookie policy

Last updated 13 October 2026

This page lists what ApplyDesk stores in the browser. We do not use third-party advertising or cross-site tracking cookies to sell audience profiles. The privacy policy covers personal data more broadly. Sponsored placements (when enabled) are labelled and use first-party measurement — see below.

Staff session

After Discord sign-in we set an HttpOnly session cookie so you stay signed in to the dashboard. It is required to use the product. Signing out or deleting the account clears it.

Applicant session

If a community form uses Discord login, we set a short-lived cookie on that community's host so you can see your own applications. It is not a staff cookie and it is not shared across other communities.

Appearance

On applydesk.net, light / dark / system is stored in local storage on your device, not as a cookie. Workspace portals use the theme the community set.

Site analytics

Public marketing pages (the homepage, guides, tools, and similar) send cookieless page views and referrers to Vercel so we can see which sites and channels send traffic. If you arrive with a campaign tag in the URL, we keep that first-touch source in session storage for the visit — not as a cookie. Staff dashboards, ops, and account pages are not included. Google Analytics 4 also runs on those marketing pages and sets cookies (IP anonymised). Staff dashboards, ops, and account pages do not load it. Plausible, if configured, does not set cookies.

Referral and outreach

Owner referral links (/r/…) and outreach manager links (/o/…) set a short-lived HttpOnly cookie so we can attribute a first workspace signup. They are not sold as advertising audiences.

Sponsored placements

When sponsorship is enabled, compact banners labelled “Sponsored” may appear on staff dashboards (not inside application forms, review screens, applicant portals, or payment flows). We record first-party impression and click events for delivery reporting. Dismiss state may be stored in session storage for that browser tab/session. We do not use invasive browser fingerprinting for ads. Sponsor reports are aggregated campaign metrics — not applicant form answers. See sponsorship terms.

Third parties

Discord (sign-in and the bot) and Stripe (checkout and the customer portal) may set their own cookies on their domains. We do not control those. Cloudflare or similar DNS in front of a custom domain is the community's configuration, not ours.

Turning them off

You can block cookies in your browser. Staff and applicant login will not work without the session cookies. Tracker blockers may block marketing analytics; the product still works without Vercel Analytics. You can dismiss Sponsored banners where the control is shown.

These pages describe how ApplyDesk works. They are not legal advice. We may update them when the product or the law changes.