Cookies
Seven cookies: three that make signing in work, two that carry a social-account connection from one step to the next, one that remembers the language you chose and one that remembers which brand you were looking at in Marketing. No analytics, no advertising, no tracking — which is why there is no banner asking you about any of this. The one other company that can reach you here is YouTube: in a training lesson, only when you press play on its video, and on the Video library page, which only owners and managers can open, through the videos’ thumbnails.
In effect from 26 September 2026
1Every cookie this product sets
| Name | What it does | How long |
|---|---|---|
| trabajo_session | Keeps you signed in to the console. Holds a random token and nothing about you — the token is matched against a session record on our side. | Until the session expires, or you sign out |
| trabajo_staff | The same thing for our own support console. It is never set on a customer account. | Until the session expires, or sign-out |
| __Host-trabajo_oauth | Set only if you choose "Sign in with Google". It holds the one-time values that prove the sign-in coming back is the one this browser started. | Ten minutes, and deleted the moment the sign-in completes |
| trabajo_social_oauth | Set only when you connect a social account, or Canva. It holds the one-time values that prove the platform sending you back is answering the request this browser made. | Fifteen minutes, and deleted the moment the platform sends you back |
| trabajo_social_pending | Set only when you connect a social account, between the platform saying yes and you choosing which accounts to connect. It holds a reference to what the platform listed (or, for some platforms, that one-time permission), sealed so nothing else can use it. When you open a connect link an agency sent you, it also holds which link that was, so the link itself leaves your address bar. | Up to thirty minutes, and deleted the moment you finish choosing |
| trabajo-lang | Set only if you pick a language with the EN / ES switch. Holds "en" or "es" and nothing else, so the next page is in the language you chose. | One year, or until you clear it |
| trabajo_marketing_brand | Set only if you choose a brand with the switcher in Marketing, and sent only to Marketing pages. Holds which brand you chose, tied to your account and organization so it never carries over to somebody else using the same browser. | One year, or until you clear it |
The three sign-in cookies, the two social-account cookies and the Marketing brand cookie are httpOnly, so no script on the page can read them, and SameSite=Lax, so another site cannot make your browser send one. In production they are marked Secure and travel only over HTTPS.
The language cookie is also SameSite=Lax, but it is not httpOnly: it holds nothing except the language you picked, so there is nothing in it to hide from the page.
2Videos in training lessons
A training lesson can include a YouTube video. The video itself is embedded in YouTube’s privacy-enhanced mode, from youtube-nocookie.com. Pressing play also loads YouTube’s player script from www.youtube.com, YouTube’s main domain, and if you are signed in to YouTube or Google in this browser, that request can carry your YouTube cookies.
Nothing is loaded from YouTube until you press play. Until then the lesson shows only a play button and the video’s title: no thumbnail, no player and no script from Google.
Once you press play, YouTube (Google) serves the player, and it may set cookies or use local storage on its own domains, under Google’s privacy policy. Those are YouTube’s, not ours, which is why they are not in the table above. Google’s privacy policy
TrabajoCRM sets no cookie for this. All it learns is whether the video played to the end, or that you ticked “I watched this” instead.
The Video library page, which only owners and managers can open, shows each video’s thumbnail from YouTube’s image server, i.ytimg.com, as soon as it opens. No other page loads anything from YouTube before you press play.
3What we do not set
There is no analytics cookie, no advertising cookie and no session-recording script on this site or in the console. Not Google Analytics, not a Meta pixel, not a heatmap tool, not a chat widget that brings its own tracking with it.
We do not know how you found this page, we do not build a profile of what you look at, and there is nothing to opt out of.
4Why there is no banner
Consent is required for cookies that are not necessary to provide the service you asked for. Every cookie above is necessary in exactly that sense: without the sign-in cookies, signing in does not work, without the social-account cookies a connection cannot finish, the language cookie is set only when you press the switch to ask for a language, and the brand cookie only when you choose a brand in Marketing. So there is nothing to ask you about, and a banner asking anyway would be theatre.
A training video does not change that. Nothing from YouTube loads in a lesson until you press play on it, and pressing play is you asking for the video. The Video library’s thumbnails are pictures shown to the owners and managers who open that page to look at the videos.
If that ever changes — if we add anything that watches how the site is used — this page will say so before it is switched on, and you will be asked properly.
5Turning them off
Your browser can block or delete cookies, including these. Blocking them means you cannot stay signed in and the site forgets the language and the Marketing brand you chose, which is the whole of what they do.
What the desktop agent records is a separate question, and the privacy policy answers it — cookies have nothing to do with it.