Legal
Cookie policy
Openings sets exactly one cookie, and it exists only to keep you signed in. There is no analytics, no advertising and no tracking of any kind on this site — which is also why you were never shown a cookie banner.
Last updated:
1. The short version
- One cookie, strictly necessary, to keep you signed in.
- No analytics, no advertising, no tracking pixels, no social plugins, no session recording.
- No consent banner, because a strictly necessary cookie does not require consent.
- Two external services — a stylesheet CDN and Google Fonts — are contacted by your browser when a page loads, and they see your IP address. Details in section 4.
2. The cookie we set
| Name | Purpose | Type | Lifetime |
|---|---|---|---|
access_token |
Holds your signed session token so the server knows which account is making a request. Without it you would have to type your password on every page. | Strictly necessary / functional. First-party. | Up to 30 days. Deleted when you sign out, and invalidated when you change your password. |
The cookie is set with HttpOnly (scripts on the page cannot read it), SameSite=Lax (it is
not sent when another site links into ours with a form or request) and, in production, Secure (it only
travels over HTTPS). It contains a signed token identifying your account and session version. It does not track
what you look at, and it is never read by anyone but this site.
That is the complete list. We set no other cookies, first-party or third-party.
3. Why there is no cookie banner
Under Article 11.7a of the Dutch Telecommunications Act (Telecommunicatiewet), which implements the ePrivacy Directive, consent is required before storing information on your device — except where the storage is strictly necessary to deliver a service you have requested. A cookie that keeps you signed in to an account you chose to create is exactly that exception. Since we set nothing else, there is nothing to ask you about, and showing a banner would be theatre rather than a choice.
4. Requests your browser makes to other servers
These do not store anything on your device on our behalf, but they are requests to third parties, and a request always reveals your IP address. We would rather say so plainly.
| Service | What it is for | What it can see |
|---|---|---|
| cdn.tailwindcss.com | The CSS framework the site's styling is built on, loaded in your browser. | Your IP address, user-agent string and a trimmed referrer. |
| Google Fonts fonts.googleapis.com, fonts.gstatic.com |
The Inter typeface the site is set in. | Your IP address, user-agent string and a trimmed referrer. Google states that Fonts requests do not set cookies. |
We send a strict-origin-when-cross-origin referrer policy, so those servers learn the site you came
from but not which page you were on. Our Content-Security-Policy stops the site from contacting any other external
host. If you block these domains in your browser, Openings still works — it just falls back to your system fonts
and, without the styling framework, looks plain.
5. Other things stored in your browser
Cookies are not the only local storage a site can use, so for completeness, here is everything Openings puts in your browser:
- A service worker cache (named
openings-v5). It keeps a copy of the home page, the app manifest and the logo files so the site loads quickly and still opens when you are offline. It holds no personal data and no job data. Older caches are deleted automatically when we ship a new version. - A push subscription, but only if you switch browser notifications on. Your browser generates it and we store a copy on the server so we can send you alerts. Revoking notification permission for this site, or turning alerts off in Settings, ends it.
- The web app manifest, if you install Openings to your home screen or desktop.
We do not use localStorage or sessionStorage at all, and we do not use
fingerprinting, local shared objects or any similar technique to recognise your device.
6. What we deliberately do not use
No Google Analytics or any other analytics product. No advertising or remarketing tags. No tracking pixels in the site or in our emails, so we do not know whether you opened an alert or clicked a job in it. No embedded social media widgets. No A/B testing or heat-mapping tools. No cross-site tracking, and no data brokers.
7. How to control all of this
- Sign out — deletes the
access_tokencookie immediately. - Clear site data in your browser's settings for marketing-jobs.nl — removes the cookie, the service worker and its cache, and any push subscription.
- Block cookies for this site — you are free to, but you will not be able to stay signed in, which means the feed will not work.
- Revoke notification permission in your browser, or switch alerts off in Settings, to stop push messages.
- Block third-party domains with an extension if you would rather cdn.tailwindcss.com and Google Fonts never see your IP address.
8. Changes and questions
If we ever add something that stores or reads information on your device beyond what is described here, we will update this page, change the date at the top, and — where the law requires consent — ask you first. Questions go to hello@marketing-jobs.nl. How we handle personal data more generally is set out in the Privacy policy.