Cookie Policy

This policy explains how RaetOS uses cookies and browser storage for login, security, preferences, and the browser extension.

Effective: May 25, 2026RaetOS[email protected]

Plain-English Summary

  • RaetOS uses essential cookies for login, session refresh, CSRF protection, and bot protection.
  • RaetOS uses browser storage for preferences such as theme and for extension state such as sent-board history.
  • Google and Microsoft may set their own cookies during sign-in. RaetOS does not control those provider cookies.
  • RaetOS does not currently use third-party advertising cookies or cross-site ad tracking.
  • Clearing the extension sent board only clears local browser state. It does not delete jobs already sent to My Queue.

1. Overview

Cookies are small values stored by your browser. Browser storage, such as local storage and Chrome extension storage, stores application state on your device. RaetOS uses these technologies to keep the app signed in, protect auth flows, remember preferences, and support extension workflows.

Essential cookies are required for login, security, and session management. Non-essential cookies will not be used without notice or consent where required.

2. Cookies We Use

Name
Purpose
token
Access token cookie used to authenticate protected requests. It is configured as HttpOnly, Secure where enabled, and SameSite according to the deployed auth configuration.
refresh_token
Refresh token used to keep your session active. The server stores a hashed version so the raw refresh token is not stored directly in the database.
csrf_token
CSRF protection token used to help confirm state-changing requests come from the RaetOS app flow.
cf-turnstile
Cloudflare Turnstile may set cookies or similar browser data during login or signup bot-protection checks.

3. Browser Storage

RaetOS also uses local browser storage. Unlike cookies, local storage is not sent with every web request by default.

Name
Purpose
access_token
Frontend fallback token storage used by the app API client in some auth flows.
theme
Stores your selected theme preference, including system-default behavior where supported by the app.
UI state
Stores small interface preferences such as navigation or layout state when the app needs to remember them.

4. Browser Extension Storage

The RaetOS browser extension uses Chrome extension storage to stay connected and track local capture state.

Name
Purpose
accessToken
Extension access token used to send selected job postings to the RaetOS API.
refreshToken
Extension refresh token used to keep the extension connected until the session expires or is revoked.
user
Basic signed-in user context displayed inside the extension.
sentBoard
Local list of postings sent from this browser, used for week/session/sent counts and the popup sent board.
dismissedJobKeys
Local list of job pages dismissed or marked not interested so the floating panel does not keep reappearing for that posting.
apiEnvironment
Extension environment selection used to point the extension at the correct RaetOS API.

Clearing the local sent board resets this browser's local counts and board view. It does not remove postings already saved to your RaetOS account.

5. Third-Party Cookies

Google and Microsoft may set cookies on their own domains when you use social sign-in. Those cookies support their authentication flow and are governed by their own privacy policies.

  • Google sign-in may use Google cookies during OAuth authentication.
  • Microsoft sign-in may use Microsoft cookies during OAuth authentication.
  • Cloudflare Turnstile may use cookies or browser data for bot-protection checks.
  • RaetOS does not request Gmail or Outlook mailbox access through these sign-in flows.

6. Your Controls

  • You can clear RaetOS cookies and site data from your browser settings.
  • You can clear extension local state from the extension popup where supported, including the local sent board.
  • If you block essential cookies, login and authenticated app features may stop working.
  • You can sign out of the web app or extension to remove active local session state.
  • You can revoke extension sessions from Settings where available.

7. Changes to This Policy

RaetOS may update this Cookie Policy as the app, auth flow, or extension changes. When material changes are made, we will update this page and the effective date.

8. Contact

For questions about cookies, browser storage, or privacy controls, contact [email protected].

Related pages: Privacy Policy, Terms of Service, and Security.