IssuePay Cookie Policy
1. Introduction
This Cookie Policy explains how IssuePay uses cookies and similar technologies when you use our website, web application, embedded job application pages, and related services at issuepay.app.
2. What Are Cookies?
Cookies are small text files stored on your browser or device by websites you visit. They serve different purposes: some are essential to keep you logged in, others remember your preferences, and some help us understand how the platform is used. You can control cookies through your browser settings.
3. Cookies and Technologies We Use
The following describes every cookie and storage technology active on IssuePay:
| Name / Technology | Type | Purpose | Duration | Party |
|---|---|---|---|---|
| _issuepay_session | Strictly Necessary | Phoenix session cookie. Maintains your authentication state and CSRF security token. Required to keep you logged in and protect against cross-site request forgery. | Session (browser close) | First-party |
| remember_me | Strictly Necessary | Persistent login token. Keeps you signed in across browser restarts when you select "Remember me" at login. | 60 days | First-party |
| cookie_consent | Strictly Necessary | Stores your cookie consent decision so we do not ask again on every visit. | 1 year | First-party |
| locale | Preference | Stores your language preference so the platform displays in your chosen language on return visits. | 1 year | First-party |
| Umami Analytics | Analytics , No Consent Required | Cookieless, privacy-first analytics. Measures aggregate page views, feature adoption, and referrer sources. Sets no cookies, collects no personal data, and cannot track you across websites. | No cookies set | First-party (self-hosted) |
| Sentry | Legitimate Interest | Error monitoring and session replay on error only (replaysOnErrorSampleRate). Used to detect and diagnose platform crashes. Captures error stack traces, page URL, and session ID , no personal data is intentionally collected. | Session (error-triggered only) | Third-party (Sentry Inc) |
4. Strictly Necessary Cookies
Strictly necessary cookies are essential for the platform to function. They enable authentication, protect against CSRF attacks, maintain your session, and remember your consent decision. These cookies cannot be disabled without breaking core features such as login and job application submission. Under applicable law, strictly necessary cookies do not require your consent.
5. Analytics , Umami (No Consent Required)
We use Umami Analytics, a self-hosted, cookieless analytics solution. Umami does not set any cookies, does not track you across websites, and does not collect any personally identifiable information. It records only anonymous, aggregate data such as page views, session counts by country, and referrer sources.
Because Umami sets no cookies and collects no personal data, it does not require your consent under ePrivacy rules, GDPR, CCPA, or equivalent laws. Umami respects the "Do Not Track" browser signal.
6. Error Monitoring , Sentry (Legitimate Interest)
We use Sentry for error monitoring. Sentry captures session replays only when a platform error occurs (replaysOnErrorSampleRate: 1.0) , not during normal browsing. This is used solely to diagnose and fix bugs that prevent users from accessing the platform.
Sentry captures: error messages, stack traces, page URL, browser type, and a session ID. It does not intentionally capture login credentials, form content, or personal identification. We process Sentry data on the basis of legitimate interest in maintaining platform stability. Sentry data is retained for 30–90 days.
7. Managing Your Cookie Preferences
You can control and delete cookies through your browser settings at any time. You may also use our cookie consent banner (shown on your first visit) to accept or reject non-essential cookies. A link to update your preferences is available in the page footer.
You can reject all non-essential cookies and the platform will continue to function fully. Only strictly necessary cookies (session, remember_me, cookie_consent) remain active if you reject.
Warning: Deleting the _issuepay_session or remember_me cookies will log you out of the platform.
8. Consent, Withdrawal, and Re-consent
Where required by law, we request your consent before activating non-essential cookies or technologies. Your consent choice is stored for 1 year. You may withdraw or update your consent at any time by clicking the cookie settings link in the footer , withdrawal is as easy as giving consent.
If we make material changes to this policy (adding new cookies or third-party services), we will notify you and request fresh consent where required.
9. Updates to This Policy
We may update this Cookie Policy to reflect platform changes, legal requirements, or operational updates. Material updates will be reflected by the "Last Updated" date below and, where significant, communicated to you directly.
10. Contact
If you have questions about this Cookie Policy or wish to exercise your rights, contact us at general@issuepay.app.
Last Updated: 25th June 2026