Cookies
Last updated: 28 October 2026
On this page
This page explains the cookies, and the local and session storage, that the Onboardly dashboard and public pages use, and why.
1.What these are
Cookies, local storage and session storage are small pieces of data a website stores in your browser. We use them to keep the dashboard working and to remember a small number of preferences.
2.What we store
| Name | Purpose | Duration | Type |
|---|---|---|---|
| sb-<project-ref>-auth-token | Keeps you signed in to the recruiter dashboard. | 30 days if you tick "Remember me" when you sign in, otherwise until you close your browser; ends sooner if you sign out. | Cookie Essential |
| onboardly-recovery-verified | Marks that you arrived at the reset-password page from a genuine password-recovery email link. | A few minutes. | Cookie Essential |
| onboardly-remember-me | Remembers whether you asked to stay signed in on this device. | Up to 30 days, or until you sign out. | Cookie Preference |
| onboardly-device-trust | Proves this browser has already completed the emailed sign-in code, so you are not asked again on it. Holds only a random browser id, an expiry time, and a signature — never your name, email address, IP address, or a device fingerprint. Signed so it cannot be edited or used to sign in as someone else. It stays in place even after you sign out; clearing cookies or using private browsing means the next sign-in asks for a code again. | 30 days if you tick "Remember me" when you sign in, otherwise until you close your browser. | Cookie Essential |
| onboardly-signed-in | Lets the public Onboardly website show "Go to Dashboard" instead of "Sign in" when you are already signed in on the dashboard. Holds only the number 1 — never your name, email address or any sign-in credential — and grants no access: the dashboard still checks your real sign-in. Set on the whole rca-onboardly.com site; removed when the dashboard sees you are signed out. | 30 days if you tick "Remember me" when you sign in, otherwise until you close your browser, or until the dashboard sees you are signed out. | Cookie Preference |
| onboardly.theme | Remembers whether you chose light, dark, or system appearance. | Until you change it or clear your browser storage. | Local storage Preference |
| onboardly.application-form-draft. | Saves your progress through the candidate application form on this device, so a closed tab does not lose your answers. | Until you submit the form, or clear your browser storage. | Local storage Essential |
| onboardly.tour-handoff | Carries a one-off signal to start the guided dashboard walkthrough right after you sign in. | 30 seconds, or until the browser tab closes. | Session storage Preference |
| onboardly.tour-auto-started | Remembers that this device already started the guided dashboard walkthrough automatically, so a new account is not offered it twice. | Until you clear your browser storage. | Local storage Preference |
| onboardly-docs-sample-language | Remembers which code-sample language you last picked on the developer documentation pages. | Until you change it or clear your browser storage. | Local storage Preference |
| onboardly-cookie-notice-dismissed | Remembers that you dismissed the cookie notice, so it does not show again. Shared across rca-onboardly.com and the dashboard, so dismissing it on one covers both. Holds only the number 1. | 365 days. | Cookie Preference |
| onboardly.cookie-notice-dismissed | Remembers that you dismissed the cookie notice, so it does not show again on this device. | Until you clear your browser storage. | Local storage Preference |
3.No analytics or advertising
Onboardly does not set analytics or advertising cookies, and does not use any third party to track you across websites.
4.Third-party scripts
A small number of features load code from a third party only when that feature is switched on:
- Cloudflare Turnstile — A bot-abuse challenge widget shown on the sign-in, sign-up and password pages. Not currently loaded.
- Meta / Facebook JS SDK — Lets a recruiter connect their own WhatsApp Business Account during setup. Not currently loaded.
5.Clearing cookies and storage
You can clear cookies and site storage at any time from your browser's settings. Doing so will sign you out and reset any remembered preference; it will not delete your account or any data stored on our servers.
6.More information
See our Privacy Policy (/privacy) for how we handle personal data more generally.