Legal
Cookie Policy
Last updated: September 2026
Most sites bury a hundred trackers behind a consent wall. HireLens has so few cookies that we can just list them.
The complete inventory
| Cookie | Type | Purpose | Set when |
|---|---|---|---|
better-auth.session_token | Essential | Keeps you signed in to a self-hosted instance. HttpOnly, signed. | On sign-in to the product |
ph_* / posthog cookies | Optional analytics | Distinguishes visits in product analytics. Autocapture is disabled — explicit product events only. | Only if the operator sets NEXT_PUBLIC_POSTHOG_KEY |
What you will never find
- No advertising or cross-site tracking cookies.
- No third-party pixel tags or data brokers.
- No consent banner — because there is nothing to consent to beyond the table above.
Managing analytics cookies
Because analytics activate only when an operator configures a PostHog key, the honest control is deployment-level: don't set the key, and no analytics exist anywhere in the stack. Self-hosters who enable it should disclose it to their own users in their own privacy notice.
Questions
The contact page lists the fastest ways to reach a maintainer.