Cookie Policy
Last Updated: 15 February 2026 | Version 1.2.0
IMPORTANT – PLEASE READ CAREFULLY
This Cookie Policy should be read together with our Privacy Policy and Terms of Service. By continuing to use our website and platform, you consent to our use of cookies in accordance with this policy.
You can manage your cookie preferences at any time by clicking the "Cookie Settings" link in the footer of our website.
1. INTRODUCTION
1.1 What Are Cookies?
Cookies are small text files that are placed on your computer, smartphone, or other device when you visit a website. They are widely used to make websites work more efficiently, enhance user experience, and provide information to the website owners. Cookies are not programs and cannot carry viruses or install malware on your device.
1.2 Why Do We Use Cookies?
Shift Cova uses cookies and similar technologies (such as local storage, pixels, and web beacons) to:
- Essential Operations: Enable core website and platform functionality, including user authentication and security.
- Performance Improvement: Understand how visitors interact with our website and platform to improve user experience.
- Personalization: Remember your preferences and settings to provide a tailored experience.
- Marketing: Deliver relevant advertisements and measure their effectiveness (with your consent).
- Analytics: Analyse usage patterns to help us improve our services.
1.3 Legal Basis
Under the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR) and the UK GDPR, we are required to:
- Obtain your consent for non-essential cookies before they are set.
- Provide clear and comprehensive information about the cookies we use.
- Allow you to withdraw your consent at any time.
Strictly necessary cookies (those required for the website to function) are exempt from consent requirements and may be set automatically.
2. TYPES OF COOKIES WE USE
We use the following categories of cookies on our website and platform:
| Category | Purpose | Examples | Duration | Consent Required |
|---|---|---|---|---|
| Strictly Necessary | Essential for the website to function properly. These enable core functionality such as security, network management, and account access. The platform cannot function properly without these cookies. | Session cookies, authentication cookies, CSRF tokens, load balancing cookies | Session / Persistent (up to 1 year) | No (automatic) |
| Functional | Allow the website to remember choices you make (such as your language, region, or saved preferences) and provide enhanced, personalised features. | Language preferences, region selection, saved settings, user interface customisation | Up to 1 year | Yes |
| Analytics/Performance | Allow us to recognise and count the number of visitors, see how visitors move around the website, and understand which pages are most popular. This helps us improve the way our website works. | Google Analytics, Mixpanel, Hotjar, Amplitude | Up to 2 years | Yes |
| Marketing/Targeting | Record your visit to our website, the pages you have visited, and the links you have followed. We use this information to make our website and any advertising displayed to you more relevant to your interests. | Google Ads, Facebook Pixel, LinkedIn Insights, Twitter Ads | Up to 90 days | Yes |
| Third-Party | Cookies set by third parties on our behalf to provide services such as analytics, advertising, and social media integration. | YouTube, Vimeo, Twitter, LinkedIn, Facebook, Google Maps | Varies (see third-party policies) | Yes |
3. DETAILED COOKIE LIST
Below is a detailed list of the specific cookies we use on our website and platform:
3.1 Strictly Necessary Cookies
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| sessionid | Shift Cova | Maintains user session state across page requests | Session |
| csrftoken | Shift Cova | Protects against Cross-Site Request Forgery (CSRF) attacks | 1 year |
| cookie_consent | Shift Cova | Stores your cookie consent preferences | 180 days |
| messages | Shift Cova | Stores temporary notification messages | Session |
| AWSALB | AWS | Load balancing cookie to ensure user requests are sent to the same server | 7 days |
| AWSALBCORS | AWS | Load balancing cookie for CORS requests | 7 days |
3.2 Functional Cookies
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| language_pref | Shift Cova | Remembers your language preference | 1 year |
| theme_pref | Shift Cova | Remembers your theme preference (light/dark mode) | 1 year |
| sidebar_collapsed | Shift Cova | Remembers whether you prefer the sidebar collapsed or expanded | 1 year |
| recent_searches | Shift Cova | Stores your recent searches for convenience | 30 days |
3.3 Analytics Cookies
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Google Analytics | Used to distinguish users | 2 years |
| _gid | Google Analytics | Used to distinguish users | 24 hours |
| _gat | Google Analytics | Used to throttle request rate | 1 minute |
| _ga_* | Google Analytics | Used to persist session state | 2 years |
| _hjSession_* | Hotjar | Holds current session data | 30 minutes |
| _hjSessionUser_* | Hotjar | Holds user ID for analytics | 1 year |
| mp_*_mixpanel | Mixpanel | Used for product analytics | 1 year |
| amplitude_id_* | Amplitude | Used for product analytics | 10 years |
3.4 Marketing Cookies
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| _fbp | Used by Facebook to deliver advertisements | 90 days | |
| _gcl_au | Google Ads | Used by Google Ads for conversion tracking | 90 days |
| _li_* | Used by LinkedIn for ad personalization | 90 days | |
| UserMatchHistory | LinkedIn Ads ID syncing | 30 days | |
| _ttp | TikTok | Used by TikTok for advertising | 13 months |
| _tt_enable_cookie | TikTok | Used by TikTok for advertising | 13 months |
| IDE | Google DoubleClick | Used for remarketing | 13 months |
| test_cookie | Google DoubleClick | Used to check if browser supports cookies | 15 minutes |
3.5 Third-Party Embedded Content Cookies
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| VISITOR_INFO1_LIVE | YouTube | Used by YouTube to track user preferences | 6 months |
| YSC | YouTube | Used by YouTube to track user views | Session |
| vuid | Vimeo | Used by Vimeo to track user preferences | 2 years |
4. HOW TO MANAGE COOKIES
4.1 Our Cookie Consent Tool
When you first visit our website, you will see a cookie banner that allows you to:
- Accept All: Consent to all categories of cookies.
- Reject Non-Essential: Accept only strictly necessary cookies.
- Customize Settings: Select which categories of cookies to accept.
You can change your preferences at any time by clicking the "Cookie Settings" link in the footer of our website. This will reopen the cookie preference centre where you can update your choices.
4.2 Managing Cookies Through Your Browser
Most web browsers allow you to control cookies through their settings preferences. You can:
- View cookies stored on your device and delete them individually.
- Block third-party cookies.
- Block all cookies from specific websites.
- Block all cookies from being set.
- Delete all cookies when you close your browser.
To find out how to manage cookies on popular browsers, visit:
4.3 Managing Analytics Cookies
You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.
To opt out of Hotjar tracking, visit Hotjar's Opt-out Page.
To opt out of Mixpanel tracking, you can use their opt-out mechanism.
4.4 Managing Marketing Cookies
To manage your preferences for online advertising cookies, you can visit:
4.5 Consequences of Disabling Cookies
Please note that if you choose to block or delete cookies, some parts of our website and platform may not function properly. In particular:
- You may not be able to log in to your account.
- Some features may not work as intended.
- Your preferences may not be saved.
- The website may be slower or less responsive.
5. OTHER TRACKING TECHNOLOGIES
5.1 Local Storage and Session Storage
In addition to cookies, we may use local storage and session storage (collectively, "Web Storage") to store data locally in your browser. Web Storage is similar to cookies but can store larger amounts of data and is not automatically sent to the server with each HTTP request.
We use Web Storage to:
- Cache user preferences and settings.
- Store temporary data to improve performance.
- Maintain state across page refreshes.
5.2 Pixels and Web Beacons
We may use pixels, web beacons, and similar technologies (small graphic images, also known as "tracking pixels") to:
- Track user engagement with our emails (e.g., open rates, click-through rates).
- Monitor traffic patterns and user behaviour.
- Deliver targeted advertisements.
5.3 Fingerprinting
We may use device fingerprinting techniques for security purposes, such as to detect and prevent fraudulent activity, particularly on job applications. Fingerprinting involves collecting information about your device configuration (such as browser type, installed fonts, screen resolution, and plugins) to create a unique identifier. This information is not used for advertising or tracking across websites.
6. THIRD-PARTY COOKIES
Some cookies are placed by third parties on our behalf. These third parties may use information about your visits to this and other websites to provide relevant advertisements about goods and services that you may be interested in. They do not collect personal data that directly identifies you.
6.1 Google Analytics
We use Google Analytics to analyse the use of our website. Google Analytics gathers information about website use by means of cookies. The information gathered relating to our website is used to create reports about the use of our website. Google's privacy policy is available at: https://www.google.com/policies/privacy/.
6.2 Hotjar
We use Hotjar to better understand our users' needs and to optimise this service and experience. Hotjar uses cookies and other technologies to collect data on our users' behaviour and their devices. Hotjar's privacy policy is available at: https://www.hotjar.com/legal/policies/privacy/.
6.3 Marketing Partners
We may use marketing partners such as Google Ads, Facebook, LinkedIn, and Twitter to deliver relevant advertisements. These partners may use cookies to track your browsing behaviour across websites and to build profiles of your interests. Their privacy policies can be found at:
7. YOUR RIGHTS
7.1 Right to Withdraw Consent
You have the right to withdraw your consent for non-essential cookies at any time. You can do this by:
- Clicking the "Cookie Settings" link in the footer of our website.
- Managing cookies through your browser settings as described in Section 4.
- Using the opt-out mechanisms provided by our analytics and marketing partners.
7.2 Right to Access Information
You have the right to request a copy of the information we hold about you, including information collected through cookies. To make such a request, please contact our Data Protection Officer at dpo@cipherknights.com.
7.3 Right to Object
You have the right to object to the processing of your personal data for direct marketing purposes, including profiling related to such marketing. If you object, we will stop processing your data for these purposes.
7.4 Right to Lodge a Complaint
If you believe that our use of cookies violates applicable law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's OfficeWycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom
Website: www.ico.org.uk
8. UPDATES TO THIS POLICY
8.1 Policy Changes
We may update this Cookie Policy from time to time to reflect changes in technology, legislation, or our data practices. When we make material changes, we will:
- Update the "Last Updated" date at the top of this policy.
- Provide notice through our website or by email (for significant changes).
- Seek fresh consent if required by law.
8.2 Notification of Changes
If we make material changes to this policy, we will notify you through a prominent notice on our website or by email to the address associated with your account. We encourage you to review this policy periodically to stay informed about our use of cookies.
9. CONTACT INFORMATION
If you have any questions, concerns, or requests regarding this Cookie Policy or our use of cookies, please contact us at:
Cipher Knights Ltd (trading as Shift Cova)
Flat 9, 20 Calais Hill
Leicester
LE1 6FFbr>
United Kingdom
Data Protection Officer
Email: contact@shiftcova.com
Phone: +447424967568
Website: www.shiftcova.com
2026 Cipher Knights Ltd. All rights reserved.
Version 1.2.0 | Last Updated: 15 February 2026
Shift Cova