Hefest Cookie Policy

EU review version 6 November 2026

Proposed revision for legal approval. Effective date to be set on publication. This version does not replace the published terms until approved and published.

This policy covers cookies, pixels, local storage, session identifiers, scripts, SDKs and similar technologies on hefest.ai, quiz.hefest.ai and platform.hefest.ai. Hefest Technologies Inc is responsible for its use of these technologies. Read this policy with the Privacy Policy.

1 Necessary and optional technologies

Strictly necessary technologies support the functions you request, such as authentication, session security, fraud prevention, payment processing and storing your privacy choices. They are not used as a blanket category for advertising or optional product analytics.

Preference technologies may remember language, region or display settings. Analytics and performance technologies measure page views, quiz steps, feature use, loading times and errors. Session recordings can show interactions with the interface and require appropriate masking and choice controls. Advertising technologies can attribute visits and purchases to campaigns or measure audiences and advertising activity.

For EU users, optional technologies that require consent are blocked until the relevant category is accepted. Consent to an advertising category is separate from accepting the Terms or requesting a payment. The same rules apply to similar storage/access technologies, not only files labeled cookies.

2 Your choice

The preference control lets you accept optional categories, reject them or choose categories separately. Optional categories are not selected in advance. Reject optional is presented as a genuine accessible choice. You can continue using the core service when you reject optional tracking.

You can reopen Cookie settings and withdraw or change consent at any time. We store the choice, time and text/version needed to apply it and demonstrate compliance. A material change in purpose or provider may require a new choice. Withdrawal applies going forward and does not retroactively invalidate lawful processing.

Browser deletion alone may not communicate a new choice to every provider. Use the service preference control and, where desired, your browser's storage controls. Rejecting optional tracking does not require deleting essential authentication or payment data.

3 Systems used by Hefest

Hefest uses first-party account/session storage and security services including Cloudflare. Solidgate and PayPal, where enabled, process requested payments. Supported third-party authentication is loaded when you choose it. These systems must be limited to the purposes for which the relevant necessary processing is justified.

Product analytics and recording may use PostHog. Advertising and measurement may use Google Analytics/Google Ads, Meta and Microsoft Advertising/Bing UET, depending on the funnel and active configuration. Optional use is governed by your choices and applicable law. A provider mentioned here is not necessarily loaded on every page.

Before publication, the provider register and preference tool must identify the actual active technologies, category, purpose and duration. This policy does not substitute an assumed inventory for that technical record.

4 Information involved

Depending on the purpose, technologies may process browser/device identifiers, IP address, approximate location, language, timezone, current page, referrer, campaign parameters, click identifiers and technical events. Necessary order processing uses the information needed to complete the requested transaction.

We limit analytics and recordings to information needed for their purpose. CV content, passwords, verification codes, payment-card information, employer-message contents and free-text application answers must not be captured unnecessarily in session recordings or advertising events. Masking and event controls must cover the actual forms in each funnel.

5 Browser and server measurement

Some measurement events may be sent from our server rather than directly by the browser. Moving an advertising event to a server does not remove applicable privacy or consent obligations. Relevant choices must be respected across the landing page, quiz, product and server integrations.

Consent Mode or a provider's technical consent signal is a way to communicate a choice, not a substitute for obtaining a choice where one is required. Essential payment records may still be processed to provide and document your purchase even where optional advertising measurement is disabled.

6 Email technologies

Some emails may use tracked links or opening pixels. These are assessed separately from the necessity of sending the email itself. Delivery of a receipt does not automatically justify every optional tracking pixel. You can unsubscribe from marketing without blocking essential account, security or subscription communications.

7 Retention and transfers

Session technologies generally expire with the session; persistent technologies remain for their configured lifetime unless removed earlier. The actual provider register must state the current cookie/storage names and durations. Personal data generated by those technologies is retained under the Privacy Policy and the corresponding configured retention schedule.

Providers may process information outside the EEA. The Privacy Policy explains transfer safeguards and how to request more information. Optional tracking data is not anonymous merely because a report displays aggregate numbers.

8 Changes and contact

We update this policy to match the technologies actually used and request a renewed choice where required. Questions or privacy requests can be sent to [email protected].

Hefest Technologies Inc

40 W 2nd St, 2nd Floor, Office 202

Dayton, OH 45402, United States

Email: [email protected]

Phone: +1 (833) 991-9098