Third parties that may set cookies
Because we host on Vercel, a small number of infrastructure cookies are set on our domain by the platform. They support request routing, deploy previews, and protection against abuse. They are first-party from your browser's perspective and are not used to profile you or follow you across other websites.
The subprocessors involved in serving the product, and what they place in your browser:
- Vercel — hosting and edge routing. Sets short-lived infrastructure cookies (
__vercel_*) on our domain. - Neon — managed Postgres database. Reached only from our servers; sets no cookies in your browser.
- LiveKit — real-time voice transport used during interviews. Uses WebRTC over secure sockets and does not set HTTP cookies in the candidate browser.
We do not embed third-party scripts from advertising networks, social platforms, or analytics vendors, so you will not see cookies from Google, Meta, LinkedIn, or similar providers on this product. A full subprocessor list lives in the Data Handling policy, and we will update this section first if a new vendor that sets cookies is added.
EU/UK visitors, Do Not Track, and Global Privacy Control
Under the EU ePrivacy Directive, UK PECR, and GDPR, a consent banner is only required before placing cookies that are not strictly necessary for the service the visitor requested. The cookies and storage listed above are all strictly necessary or functional preferences that you control yourself, so the law does not require us to interrupt your visit with a banner — and we do not. The moment we add anything analytics- or advertising-related, a clear consent banner with granular per-category choices will appear for EU and UK visitors before any non-essential cookie is set, and we will update this policy at the same time.
We also respect browser-level privacy signals. Because we run no analytics or ad trackers, there is currently nothing to suppress when your browser sends a Do Not Track (DNT) header or a Global Privacy Control (GPC) signal. If we introduce optional cookies later, a GPC signal will be honoured as a valid opt-out of sale or sharing of personal information under CCPA/CPRA and equivalent state laws, and DNT will be treated as a do-not-set-analytics preference. We will update this policy when our use of cookies or browser storage changes — for example if we introduce product analytics, add a new subprocessor that sets cookies, or adjust retention windows. The “last updated” date at the top of the page always reflects the current version, and material changes that affect candidates or recruiters will also be flagged in the product.
Contact
Questions about this Cookie Policy, or about a specific cookie you have seen on our domain, can go to hello@nexprove.com. We will respond within a reasonable timeframe and, where applicable, route data-subject requests to the relevant policy.