Cookie Policy
Melodi · Last updated October 12, 2026
1. What this policy covers
This policy explains the cookies and similar technologies MelodiHR, LLC, doing business as Melodi (“Melodi,” “we,” “us”), uses on our websites and applications, why we use them, and how you can control them. It should be read with our Privacy Policy.
A cookie is a small text file a website stores on your device. Similar technologies, such as local storage and tracking scripts, do comparable things and are covered here too.
2. Your choices
We only set strictly necessary cookies by default. We load optional analytics only after you accept them in the cookie banner, and “Reject non-essential” is as easy as “Accept all.” Not choosing is treated as a refusal. We remember your choice for six months, then ask again, and sooner if what we use changes.
You can change or withdraw your choice at any time using in the page footer. You can also block or delete cookies in your browser settings; blocking strictly necessary cookies will stop sign-in from working.
3. Strictly necessary cookies
These are needed to provide a service you asked for, such as signing in, or to keep it secure. They do not require consent, so they cannot be switched off in our banner.
| Cookie | Purpose | Duration |
|---|---|---|
| authjs.session-token | Keeps you signed in to your employer or candidate account. | Up to 30 days |
| authjs.csrf-token | Protects sign-in and other forms against cross-site request forgery. | Session |
| authjs.callback-url | Returns you to the page you were on after signing in. | Session |
| melodi_gate | Remembers that you entered the beta access password. | 30 days |
| melodi_consent | Remembers your cookie choice and when you made it. | 6 months |
In production the Auth.js cookies carry a __Secure- or __Host- prefix, which only means the browser will send them over HTTPS.
4. Analytics (optional)
With your permission we use Vercel Web Analytics and Vercel Speed Insights to count page views and measure how quickly pages load, so we can fix problems and improve the product. Neither sets a cookie on your device; they are loaded only if you accept analytics, and they are not loaded again if you withdraw.
5. Error monitoring
We use Sentry to detect and diagnose errors and slow pages. Sentry's browser SDK does not set cookies here. It sends technical information such as the page, browser type and error details, which we use to keep the service working and secure. See our Privacy Policy for details.
6. Payments
When an employer subscribes or manages billing, we send you to Stripe's hosted pages. Stripe sets its own cookies there, under its own policy at stripe.com/cookies-policy. We do not control them.
7. What we do not do
We do not use advertising or cross-site tracking cookies, and we do not sell or share cookie data for advertising. If that ever changes, we will update this policy and ask for your consent first.
8. Changes and contact
We will post changes here and update the date above. If a change affects what you have agreed to, we will ask you again. Questions? Use our contact form.