Privacy, Communications & ConductDraft — Pending Attorney ReviewLast updated: 2026-10-27

Cookie Policy

DRAFT — NOT LEGAL ADVICE. This document is a working draft prepared for review by a licensed attorney. It has not been reviewed or approved by counsel and must not be published or relied upon until it is. Bracketed items like [COMPANY LEGAL NAME] are placeholders. See the attorney review checklist (`docs/legal-research/ATTORNEY-REVIEW.md`).

This Cookie Policy explains how [COMPANY LEGAL NAME] ("JobDeposit," "we," "us") uses cookies and similar browser storage technologies on the JobDeposit website and web application (the "Platform"). It supplements our Privacy Policy and Terms of Service.

1. Categories of cookies we use

Strictly necessary cookies: required for authentication, session continuity across Homeowner (/homeowner), Contractor (/contractor), and Pro (/pro) views, cross-site request forgery (CSRF) protection on /api/* endpoints, and payment security and fraud prevention during held-deposit funding and business bank account onboarding. Because the Platform cannot function securely without these cookies, they cannot be disabled in our preference center.
Preferences cookies: remember your interface preferences, cookie consent choices, and Global Privacy Control (Sec-GPC: 1) opt-out state.
Analytics cookies (optional): help us understand aggregate page traffic and feature performance ([ANALYTICS PROVIDER]). Enabled only where permitted and subject to opt-out.
Advertising cookies (not active by default): JobDeposit does not set third-party behavioral advertising cookies by default. If optional campaign attribution cookies ([AD PROVIDERS]) are used in the future, they will be disabled when you opt out or send a Sec-GPC: 1 signal.

2. Cookie table (actual cookies and storage keys used)

The table below lists the actual cookies and browser storage keys used by the JobDeposit Platform and our payment processor ([PAYMENT PROCESSOR, e.g., Stripe, Inc.]):

Cookie / Storage Key	Provider	Category	Duration	Purpose
`jd_session`	JobDeposit (first-party)	Strictly necessary	Session (up to 24 hours)	Maintains your authenticated session and active role context across `/homeowner`, `/contractor`, and `/pro`.
`jd_csrf`	JobDeposit (first-party)	Strictly necessary	Session	Validates state-changing requests to `/api/*` endpoints against cross-site request forgery.
`jdcookieconsent`	JobDeposit (first-party)	Preferences	12 months	Stores your cookie banner choices and records whether a Global Privacy Control (`Sec-GPC: 1`) opt-out applies.
`_stripemid`	Stripe, Inc. (Processor)	Strictly necessary (fraud prevention)	1 year	Distinguishes devices during held-deposit funding and Contractor payout onboarding to detect and prevent payment fraud.
`_stripesid`	Stripe, Inc. (Processor)	Strictly necessary (fraud prevention)	30 minutes	Maintains session integrity while funding a held deposit or linking a verified business bank account.

3. Your choices and Global Privacy Control

Cookie preference control: you may opt out of non-essential cookies at any time using our cookie settings control (stored in jdcookieconsent).
Global Privacy Control (Sec-GPC: 1): when your browser sends a Global Privacy Control signal, we automatically treat it as an opt-out of non-essential analytics/advertising cookies and any "sale" or "sharing" of personal information under state privacy laws.
Browser controls: most browsers allow you to block or delete cookies in settings. Blocking strictly necessary cookies (jdsession, jdcsrf, _stripemid, _stripesid) may prevent signing in, funding a held deposit, or linking a business bank account.

4. More information

For more details on how we handle personal data and state privacy rights, see our Privacy Policy. Questions may be directed to [PRIVACY EMAIL].