Legal
Cookie Policy
Effective July 28, 2026
This policy explains the cookies and similar technologies (browser local and session storage, pixels) that Marlow uses on hiremarlow.com and in the Marlow web application, what each one is for, and how to change your mind. It supplements our Privacy Policy.
What a cookie is
A cookie is a small text file a site asks your browser to store. Some are set by us (“first party”) and some by services we use, such as Google (“third party”). We group them into three categories, and you control the last two.
Your choices
Strictly necessary cookies always run — the site cannot sign you in or stay secure without them, and no consent is required for them. Everything else is your call:
- If you are in the EEA, the UK, or Switzerland, analytics and advertising cookies are off until you turn them on. Nothing non-essential is stored on your device before you choose.
- Elsewhere, they are on by default and you can switch them off at any time — including as an opt-out of “sale” or “sharing” of personal information for cross-context behavioural advertising under US state privacy laws.
- Your choice is stored for six months, after which we ask again.
You can also block or delete cookies in your browser settings, and most browsers offer a “do not track” or Global Privacy Control (GPC) signal. Blocking strictly necessary cookies will stop you being able to sign in.
Strictly necessary
Required to operate the Services. These cannot be switched off, and they are never used for advertising or profiling.
| Name | Set by | Purpose | Retained |
|---|---|---|---|
| authjs.session-token / __Secure-authjs.session-token | Marlow (first party) | Keeps you signed in and identifies your session. Without it you cannot use the application. | Session / up to 30 days |
| authjs.csrf-token / __Host-authjs.csrf-token | Marlow (first party) | Cross-site request forgery protection on sign-in and form submissions. | Session |
| authjs.callback-url | Marlow (first party) | Returns you to the page you were heading for after you sign in. | Session |
| marlow_consent | Marlow (first party) | Remembers the cookie choices you made here, so we do not ask again on every page. | 6 months |
| tt_ref | Marlow (first party) | Carries a referral code from a careers page to the candidate signup form so the referring assistant is credited. | 30 days |
| tt_last_thread | Marlow (first party) | Reopens the conversation you were last reading when you return to Messages. | 30 days |
Analytics
Used only if you allow the Analytics category. When you have not, Google Analytics runs in a cookieless mode: no identifier is written to your device.
| Name | Set by | Purpose | Retained |
|---|---|---|---|
| _ga, _ga_* | Google Analytics | Distinguishes visitors and sessions so we can see which pages are used and where people drop off. Reported to us in aggregate. | Up to 2 years |
| _gid | Google Analytics | Distinguishes visitors within a 24-hour window. | 24 hours |
Advertising
Used only if you allow the Advertising category. When you have not, Google Ads receives no advertising identifiers from your device and ad personalisation is disabled.
| Name | Set by | Purpose | Retained |
|---|---|---|---|
| _gcl_au, _gcl_aw, _gac_* | Google Ads | Links a sign-up or booked call back to the ad that produced it (conversion measurement) and supports remarketing audiences. | Up to 90 days |
| marlow_attribution (browser session storage, not a cookie) | Marlow (first party) | Holds the ad-click identifiers (gclid, fbclid) and UTM tags from your arriving link so they reach our booking calendar and the booking is attributed to the right campaign. | Until you close the tab |
Third parties on our pages
Our booking calendar is embedded from LeadConnector (GoHighLevel) and payment forms are served by Stripe. Those providers set their own cookies when their embed loads, governed by their own policies. Video lessons served through YouTube are embedded in privacy-enhanced mode where available.
Changes
If we add or remove a technology we will update this page and the effective date above. Material changes that expand what we collect will be accompanied by a fresh consent prompt.
Contact
Questions about cookies or this policy: [email protected].