Cookie Notice

Effective date: 2026-09-05.

NextCommitHQ Network uses cookies only to keep you signed in. This notice lists every cookie and explains why there is no consent banner.

1. Cookies we set

Sign-in session (set by our sign-in provider, name beginning wos-session). Holds an encrypted session so you stay signed in across pages. HttpOnly, Secure, SameSite=Lax. Expires when the session expires or when you sign out. Strictly necessary.
Development session (nchq_session). Used only in development builds where the sign-in provider is not configured. It never exists in production. Strictly necessary in that setting.

That is the full list today. We do not currently set advertising, analytics, personalization, social-media, or cross-site cookies.

2. Local storage

The Network does not store personal information in browser local storage. Passwords and tokens are never placed in local storage.

3. Third-party scripts and requests

No third-party scripts run on our pages. Fonts are served from our own domain. Our content security policy blocks scripts from any other origin, so a third-party cookie cannot be set by our pages. The hosted sign-in page is on our sign-in provider's domain and is governed by its own cookie practices while you are there.

Consent laws that require a banner apply to cookies that are not strictly necessary, such as advertising or analytics cookies. Because we use only strictly necessary session cookies, a banner is not required.

5. Advertising and measurement cookies we may add

We may introduce advertising, including advertising served by third-party networks such as Google, and measurement tools such as conversion pixels or analytics. Those partners would set their own cookies and similar identifiers to show and measure ads, including ads based on your activity on the Network and on other sites. Before any such cookie is set we will: list the partner, the cookie, its purpose, and its lifetime here; show a consent banner where the law requires one and load the cookie only after you agree; provide an opt-out for targeted advertising in the footer; and honor browser opt-out signals such as Global Privacy Control where required. Advertising cookies will never be set on pages that show private conversations, assessments, or hiring records.

6. Server-side measurement

We measure product use with server-side events tied to your account, with fixed event names and short, non-sensitive properties, deleted after 30 days. This does not use cookies or any third party. It is described in the Privacy Policy.

7. Your controls

You can delete cookies through your browser settings. Deleting the session cookie signs you out. Blocking cookies entirely will prevent sign-in. Once advertising cookies exist, the footer opt-out and the consent banner control them, and most ad networks also offer their own controls, such as Google's ad settings.

8. Contact

Questions about cookies: privacy@nextcommithq.com.