This page explains the cookies and similar technologies Willbi uses, what each is for, and how to control them. It sits alongside our Privacy Policy, which covers your data more broadly.
1. Strictly necessary cookies
These are required for Willbi to work and cannot be switched off. They keep you signed in (authentication and session), remember your selected language, and protect the sign-in flow. Without them, you cannot log in.
We also use your browser’s local storage to remember interface preferences such as your language. This stays on your device and is not sent to advertisers. These are not the only cookies Willbi may set: see the next section if you arrived through a referral link.
2. Referral and partner links
Willbi uses tracked links of the form willbi.work/r/xxxx, which we give to our partners. If you arrive through one of these links we store a cookie on your device called wb_ref. It lasts 30 days, or until you open an account, whichever comes first. We use it for one purpose: so that if you go on to open an account, we can attribute that sign-up to the link you came through. It gives neither you nor the person who shared the link any benefit. The cookie holds the short code from the link, the time it was set, and a cryptographic signature proving that we set it. It does not hold your name, your email address, or anything about your browsing; it is never sent to another website, and it is not used for advertising or for building a profile of you.
We also count how many separate browsers arrived through each link, so that we can measure how each link performed. That count uses a second cookie, wb_ref_vid, which also lasts 30 days and holds a random number not connected to your name, your email address, or your Willbi account. It is not set if your browser sends a Do Not Track or Global Privacy Control signal, and in that case we do not record the visit at all.
You can remove both cookies in your browser settings at any time. If you do so before you open an account, the sign-up will not be attributed to that link.
3. Product analytics
We use PostHog to understand how Willbi is used, which features are used, where people get stuck, and what to improve. Analytics events contain only event names and safe properties such as ids, counts, and enums. We never send your CV text, the job descriptions you view, your email address, or anything you type.
For signed-in users, analytics is tied to your account by an opaque user id (a UUID), not by your name or email.
Analytics runs by default. It continues unless you decline it, or unless your browser sends a Do Not Track or Global Privacy Control signal.
4. Session replay
For signed-in users we record masked session replays, a reconstruction of your interactions that helps us find and fix usability problems. Every input field and every text node is masked before the recording is stored, so your CV, job descriptions, email, and anything you type are never visible in the recording.
Session replay is off for anonymous visitors; it starts only after you sign in.
5. Do Not Track
We respect your browser's Do Not Track and Global Privacy Control settings. If either is on, we do not load analytics, we do not record sessions, and we do not count referral-link visits. One exception: if you arrive through a referral link, we still set the wb_ref cookie described in section 2, even when you send one of these signals. It records only which link you came through, nothing about you, and you can delete it in your browser at any time.
6. Third parties
Analytics is provided by PostHog. To keep it reliable and private, we route it through our own domain (a reverse proxy) instead of loading it from a third-party tracker host, and data is stored in the EU by default. PostHog processes this data on our behalf under a data-processing agreement. See the Privacy Policy for the full list of services we use.
7. Your choices
When you first visit, we ask whether to allow analytics and session replay. If you close that notice with the Escape key without choosing, we do not record any choice, and we will ask again on your next visit. Choosing “Essential only” stops analytics and session replay.
Once you have made a choice, the notice does not appear again. You can change it at any time from Settings, in the Analytics section, or by enabling Do Not Track or Global Privacy Control in your browser, which we honour.
You can also block or delete cookies in your browser settings, though blocking the strictly necessary cookies will break sign-in.
Deleting your account removes the Willbi account this analytics was linked to. It does not immediately erase events and session recordings already stored by PostHog; those are removed on PostHog's own retention schedule.
8. Contact
Questions about this Cookie Policy? Contact us at info@willbi.work.