Tracking and cookies policy

Cookies are small files or identifiers stored by the browser. Similar technologies, such as local storage, can also keep preferences and let the site work from one page to the next.

We use strictly necessary cookies for authentication, session, fraud protection and security. Without them, functions such as logging in, staying signed in and accessing private areas may not work.

These cookies are not used for behavioral advertising.

The platform may store interface preferences, such as light or dark theme, to keep your choice. The H2A_COUNTRY and NEXT_LOCALE cookies store your country choice and language preference respectively for up to one year. You can change these with the page selectors or remove this data through your browser; some preferences will then return to the default.

We use Google Analytics 4 (Google LLC) to understand how the site is used: pages visited, source of the visit, device type and events such as starting a checkout. It sets cookies such as _ga and _ga_*.

We also use Microsoft Clarity (Microsoft Corporation), which generates heatmaps and anonymized recordings of clicks and scrolling to show where people struggle. It sets cookies such as _clck and _clsk. In the logged-in areas of H2A Works (profile, résumé, applications, billing) and during sign-up, the screen content is masked and not recorded.

We also use the Meta Pixel (Meta Platforms) and Meta's Conversions API to measure the results of our Facebook and Instagram ads: pages viewed, sign-ups completed and subscriptions. It sets cookies such as _fbp and _fbc, and we send Meta data such as email and phone hashed (encrypted). This only happens while measurement is enabled.

The measurement tools are enabled by default. If you turn them off in “Cookie preferences”, none of their scripts or cookies is loaded. The admin area is not measured and we do not use behavioral advertising cookies. You can change your choice at any time: <prefs/>.

Links received from campaigns may contain UTM parameters to identify the source of the visit. These parameters are part of the URL and may be recorded along with use of the platform.

To know which channels people arrive from, we store our own cookie (h2a_attr, 60 days) with the source of the first visit: UTM parameters, the referring site and the landing page. It has no identifier, is not sent to third parties and is only linked to your account if you sign up.

Some emails sent by the platform and some applications may include a transparent 1 × 1 pixel image. When the email client loads this image, we may record an approximate open, date and time, count, browser or user agent, IP address and approximate location provided by the infrastructure.

The pixel is not a cookie of the site. Measurement is imprecise: clients may block images, preload them or use proxies — including Gmail and privacy features. So “opened” only means the image was loaded and never confirms human reading, interest, a reply or hiring.

Links in H2A Works communications may pass through a secure platform address to record the click and then lead to the stated destination. This helps assess delivery, relevance and how the messages work. Application links sent to employers must not be interpreted as proof of a reply.

• Use your browser settings to view, block or delete cookies.
• Blocking essential cookies may prevent login and authenticated areas.
• To avoid email pixels, the recipient can turn off automatic image loading in their email client.
• Users can adjust non-essential communications through the available preferences or the unsubscribe link.

Processing associated with cookies and tracking follows the purposes and bases described in the Privacy Policy. Brazil's ANPD also offers an official guide on cookies and data protection.

Questions: [email protected].