Cookie Policy

Ackberry Technologies, the operator of SchemaHR, uses a small number of essential cookies to run the platform — signing you in, keeping your session secure, and protecting forms from abuse. We do not use advertising cookies, cross-site tracking cookies, or third-party marketing pixels anywhere on schemahr.com or in the SchemaHR dashboards. That is also why you don’t see a cookie consent banner: everything described below is either strictly necessary to operate the service, or does not use cookies at all.

These are set when you sign in to a SchemaHR dashboard (SuperAdmin, Admin, Recruiter or Candidate). They are required for the platform to function and cannot be switched off without breaking login.

• Session token — identifies your logged-in session so you don’t have to re-authenticate on every page.
• CSRF token — protects forms and login from cross-site request forgery.
• Callback / redirect state — remembers where to send you back to after signing in.

These cookies are set on our own domain, are not used to track you across other websites, and expire automatically or when you sign out.

On our public marketing pages (the landing page, pricing, job board and similar pages — not the logged-in dashboards) we use Cloudflare Web Analytics to understand traffic volume and which pages are visited. It works from an aggregated page-load signal rather than a persistent identifier, does not set any cookie, and does not track you across other websites. It is never loaded on pages accessed through a private link, such as an assessment, interview, compliance, or offer-response link, so that those one-time access tokens are never associated with analytics data.

A couple of small conveniences are stored in your browser’s local storage rather than in a cookie, which means they are never sent to our servers on every request the way a cookie is:

• Currency preference — if you switch between KES and USD pricing on our pricing page, we remember your choice on that device so you don’t have to reselect it.
• Approximate region (session only) — used once per browser session to default new visitors to the right pricing currency for their region; cleared when you close the tab.

A few pages hand off to a third-party provider that may set its own cookies once you are on their domain, outside our control:

• Cloudflare Turnstile — a privacy-focused bot check shown on public forms such as sign-up, in place of a traditional CAPTCHA.
• PayPal — if you or your organisation pays by PayPal, the checkout page you’re redirected to is operated by PayPal and subject to their own cookie practices.

We don’t control cookies set on those providers’ own domains; see their respective policies for detail.

You can clear or block cookies at any time through your browser settings. Because the only cookies SchemaHR sets are essential to signing in, blocking them will prevent you from staying logged in to a dashboard — public pages, including the job board and applying for a role, will still work.

If what we use changes — for example if we introduce an optional analytics or marketing cookie in future — we will update this page with a new “last updated” date and, if the change requires it under applicable law, add a consent mechanism at that time.

Questions about this policy can be sent to support@schemahr.com.

Ackberry Technologies · Nairobi, Kenya