Cookies & browser storage
This policy covers the Atasc site and expert account experience. Atasc is operated by ADCO AI LLC. No optional analytics or advertising trackers are currently used on this site.
Updated November 2, 2026
Necessary account cookies
These first-party cookies support sign-in, security, account recovery and the flow you request. They are set when the relevant feature is used, rather than all being set on your first visit. In production they use Secure and HttpOnly protection and the browser host boundary. Account cookies use SameSite Strict; the two sign-in flow cookies use SameSite Lax. Cookies on the separate corporate site are covered by its own policy.
| Cookie | Purpose | Lifetime |
|---|---|---|
| __Host-recruiting-work-access | Keeps you signed in securely. | Until the provider-issued access token expires; the fallback lifetime is 15 minutes. Renewed during an active session. |
| __Host-recruiting-work-refresh | Renews your signed-in session. | 7 days from issue or renewal; cleared on sign-out. |
| __Host-recruiting-work-flow | Protects an account flow and carries its selected application or referral context. | 10 minutes from issue or renewal. |
| __Host-recruiting-work-oauth-binding | Binds the Google sign-in return to the browser that started it. | 10 minutes; cleared after the callback or sign-out. |
| __Host-recruiting-work-password-request | Connects an email verification or password request to this browser. | 10 minutes; may clear sooner when the flow completes or on sign-out. |
| __Host-recruiting-work-password-recovery | Protects an authorized password setup or recovery flow. | Up to 10 minutes, limited by the provider-issued recovery expiry; may clear sooner. |
Application progress in this tab
Session storage keeps selected expertise or opportunity, referral attribution and invitation context, safe return paths, account-flow markers, draft profile and application answers, assessment and interview progress, and upload or agreement acknowledgements. These entries use names beginning adco-work-, including adco-work-intent and account-specific draft or upload keys. They support the application features you use; they are not advertising identifiers.
This storage is scoped to the browser tab session. It may clear earlier after a completed step or sign-out, but unsaved member drafts can remain in the tab after sign-out. Browsers may restore a tab session. Save your work and close the tab when using a shared device. A request security token is held in page memory and is not a separate browser cookie.
Preferences and this notice
atasc.public.reduce-motion stores your chosen motion preference in local storage. It has no automatic expiry and remains until changed or cleared in your browser. This is an accessibility preference, not a tracking identifier.
atasc.cookie-notice stores the notice version, an essential-only acknowledgement, its time and its expiry in local storage for 180 days. After expiry, a notice update, or clearing this browser storage, the notice appears again. This record applies only to this browser on this device. It does not consent to an identity check, every future data use, or account deletion.
You can reopen Cookie settings in the public footer. There are no optional tracker categories to switch on or off in this version of the site. You can remove browser storage or block cookies through your browser settings; doing so can interrupt sign-in or lose unsaved application progress.
Account activity and separate services
Signed-in activity is also recorded on our servers for service operations. Browser storage controls do not delete these account records.
Google sign-in and Didit identity verification are separate services reached when you choose those features. Their sites may use their own cookies and storage under their notices. Atasc cookie settings do not control storage on those domains. Identity verification has a separate consent step; acknowledging this cookie notice does not accept it.
Questions or requests
Contact support@atasc.ai for help with this policy or an Atasc privacy request.