Cookies & storage
Effective October 24, 2026
What is stored on your device
| Name | Type | Purpose | Lasts | Category |
|---|---|---|---|---|
| gtr_session | Cookie | Keeps you signed in: a random session token, your account id, whether your account is allowed in and when that was last checked, signed so it cannot be forged. Set only when you sign in. | 30 days, extended while you keep visiting, and never more than 90 days. Sign-out ends it at once. | Strictly necessary |
| gtr_oauth, gtr_oauth_apple | Cookie | Protects a Google or Apple sign-in in progress: the one-time state and nonce for that sign-in, Google's code verifier, and the page you were heading to, signed. Set when you press the button, removed when the sign-in completes. | Ten minutes. | Strictly necessary |
| gtr-next-hash | Session storage | Holds the page fragment you were heading to (a posting handed over by the browser extension) across a Google or Apple sign-in. | Until the sign-in completes or the tab closes. | Strictly necessary |
| gtr-import | Session storage | Holds a posting the browser extension handed to the app in the page address, once the app has taken it out of the address bar, so reloading the page still shows it. | Until you save the posting, go to another page of the app or close the tab. Not used after 30 minutes. | Strictly necessary |
| gtr-ext-id | Session storage | Remembers which installed copy of the browser extension answered, so the app does not look for it again on every page. | Until the tab closes. | Strictly necessary |
| get-that-role-state-v2:<account> | Local storage | Your profile, jobs, tracker (including the simulated inbox's sample messages), outreach drafts, contacts and practice stories, kept apart for each account that signs in on this browser. Your resumes live in your account on our server, not here; the browser extension, if you use it, holds a short copy of your board. | Until you clear it (Profile: Clear my data) or clear site data. | Strictly necessary |
| get-that-role-account | Local storage | Names the account whose data was shown last, so the app opens on it at once. | Until you clear site data. | Strictly necessary |
| gtr-consent-v1 | Local storage | Records whether you allowed page-view analytics. | Until you change it here or clear site data. | Strictly necessary |
| Vercel Web Analytics | Script, no cookie | Counts page views and referrers so we can see which pages are used. No cross-site tracking. | Runs only after you allow it. Hashed visitor identifiers are discarded within 24 hours. | Analytics (optional) |
Your choice
Strictly necessary items are needed for the site to work and do not require consent. Analytics run only if you allow them in the bar shown on your first visit. You can change your mind at any time:
You can also block or delete cookies and site data in your browser settings. Blocking the session cookie means you cannot stay signed in; clearing local storage removes the jobs, tracker, contacts and stories kept in this browser; your resumes stay in your account.
Third parties
No advertising, social media or embedded third-party scripts run on this site. Company icons, postal code lookups and the AI model that structures an imported resume are reached by our own server, not by your browser. See the Privacy Policy for the full list of services.