Cookie Policy
Last updated · 18 May 2026
This policy explains how ArbLink Ltd uses cookies and similar technologies on our website and mobile app, and how you can control them. It should be read alongside our Privacy Policy.
1. What are cookies?
Cookies are small text files placed on your device when you visit a website. Similar technologies include local storage, session storage, pixels, SDKs and device identifiers. We refer to all of these as “cookies” in this policy.
Cookies can be “first-party” (set by ArbLink) or “third-party” (set by a service we use). They can be “session” cookies (deleted when you close your browser) or “persistent” (remaining for a defined period or until deleted).
2. Legal basis
Under the Privacy and Electronic Communications Regulations (PECR) and the UK GDPR, we use strictly necessary cookies on the basis that they are essential to provide the service you have requested. All other cookies are used only with your consent, which you can withdraw at any time.
3. Categories of cookies we use
Strictly necessary
Required for the Service to function. These include authentication and session cookies set by Supabase, cookies that remember your login state, security and CSRF tokens, and your cookie-consent preferences. These cannot be switched off.
Functional
Remember choices you make to improve your experience, such as theme, language or recently viewed jobs. Set only with your consent.
Analytics
Help us understand how visitors use the Service so we can improve it. Wherever possible we configure analytics in a privacy-respecting way (IP truncation, no cross-site tracking). Set only with your consent.
Marketing
We do not currently set advertising or cross-site tracking cookies. If this changes we will update this policy and ask for your consent before such cookies are set.
4. Cookies we set
| Cookie / storage key | Provider | Purpose | Category | Retention |
|---|---|---|---|---|
| sb-access-token, sb-refresh-token | Supabase | Authenticate signed-in users and refresh sessions | Strictly necessary | Session / up to 1 year |
| arblink-consent | ArbLink | Remembers your cookie consent choices | Strictly necessary | 12 months |
| arblink-theme | ArbLink | Remembers light/dark theme preference | Functional | 12 months |
| _ga, _ga_* | Analytics provider (only if enabled) | Aggregated usage analytics | Analytics | Up to 13 months |
This list may change as we add or remove features. Specific cookie names and lifetimes are indicative; your browser may show additional helper cookies set by integrated services.
5. Managing your preferences
You can change your consent at any time using the “Cookie settings” control available from our cookie banner. Withdrawing consent does not affect processing carried out before you withdrew it.
You can also block or delete cookies in your browser. Doing so for strictly necessary cookies may prevent parts of the Service from working — for example you may not be able to stay signed in.
6. Third-party cookies
Where cookies are set by third parties (for example our analytics or mapping providers), those providers act as separate data controllers for the data collected through their cookies. We recommend you also review their cookie and privacy policies.
7. Changes to this policy
We may update this policy when our use of cookies changes. The “last updated” date at the top of this page indicates the most recent revision.
8. Contact
For questions about this policy, contact privacy@arblink.co.uk.