SynthHires
Back to Platform

Legal & Compliance

Review our policies, terms, and agreements. We prioritize zero data retention and client-side encryption.

Cookie Policy

Last Updated: August 13, 2026

This Cookie Policy provides detailed, exhaustive technical information on how SynthHires ("Company", "we", "our") utilizes cookies, local storage, and similar client-side tracking technologies to deliver our orchestration platform securely.

1. Strict Limitation to Essential Technologies

SynthHires is fundamentally designed for enterprise security and privacy. Therefore, we strictly prohibit the use of third-party marketing, advertising, cross-site tracking, or behavioral profiling cookies anywhere on our application platform.

Under the EU ePrivacy Directive (Directive 2002/58/EC) and the GDPR, consent is not required for cookies that are "strictly necessary" for the delivery of a service requested by the user. 100% of the cookies and local storage items used by SynthHires fall under the "Strictly Necessary" exemption.

2. Detailed Breakdown of Client-Side Storage

To ensure total transparency, below is the exhaustive list of technologies utilized by our platform:

2.1. Authentication and Security Cookies

These cookies are set securely (HttpOnly, Secure, SameSite=Strict) and cannot be accessed via client-side JavaScript.

  • __session_jwt: Contains the cryptographically signed JSON Web Token used to authenticate your session with our backend infrastructure. Lifespan: Session (expires upon closing the browser).
  • __csrf_token: A unique, cryptographically secure string used to prevent Cross-Site Request Forgery (CSRF) attacks. Lifespan: Session.
  • cf_clearance: Set by our edge provider (Cloudflare) to distinguish between human users and malicious bots (DDoS protection). Lifespan: Max 1 year.

2.2. HTML5 Local Storage (Client-Side State)

Due to our Zero Data Retention and BYOK architecture, we rely heavily on your browser's Local Storage to maintain state without sending sensitive data to our servers.

  • synth_byok_vault: Contains your foundation model API keys (e.g., OpenAI, Anthropic). This item is encrypted using a master password or biometric derived key before being saved to Local Storage. It is never transmitted to our servers.
  • synth_ui_prefs: Stores non-sensitive user interface preferences, such as your selected theme (Dark/Light mode), sidebar toggle state, and language localization preferences.
  • synth_mcp_configs: Stores the connection strings and headers for your locally configured Model Context Protocol servers.

2.3. WebSocket State Management

During active agent swarms, we utilize ephemeral memory to manage WebSocket connections.

  • ws_session_id: An ephemeral identifier used to route asynchronous stream chunks from the orchestration engine back to your specific browser tab. This is destroyed the moment the connection is closed.

3. Managing and Disabling Cookies

Because all technologies utilized by SynthHires are strictly necessary for the platform to function securely, there is no opt-out mechanism provided within the dashboard.

If you configure your browser to block all cookies (including strictly necessary cookies) or disable HTML5 Local Storage:

  1. You will be unable to log in to the SynthHires platform.
  2. The Zero Data Retention architecture will fail, as your BYOK credentials cannot be stored client-side.
  3. Multi-agent swarms will be unable to stream real-time updates to your interface.

If you wish to clear your data, you may log out of the platform (which invalidates and deletes the session cookies) and use your browser's native developer tools to clear Local Storage.