Cookie Policy
Last updated: 28 September 2026.
A cookie is a small text file a website stores in your browser and reads back on later visits. This policy explains the cookies set by alion.io, operated by Alion (see section 01 of the Privacy Policy for who we are). Questions go to [email protected].
These cookies are needed for the site to work or to keep it secure, so they are set without asking.
| Cookie | Purpose | Lifetime |
|---|---|---|
| token | Keeps you signed in. Set only after you sign in. | 1 year from last use, or until you sign out |
| csrf | Protects forms and actions against cross-site request forgery | 1 year |
| lang | Remembers the interface language | 1 year |
| geo | Your country, worked out from your IP address, to show jobs and prices for your region | 14 days |
| tz | Your time zone offset, to show dates in local time | Browser session |
| client | Marks a visit from the Alion Android app | 1 year |
| __Host-device_uuid | A random identifier for your browser, used for security: to recognise a device you have signed in from before (so a new device is asked to confirm with a code) and to tell people from bots and scrapers. It holds no personal details. Within our own systems the same identifier also lets us count returning visitors. | 2 years |
| Short-lived flow cookies (for example oauth state, auth return address, company_hash, lang_pick) | Carry state through sign-in with GitHub, Google, LinkedIn or Telegram, company verification and similar multi-step actions | Minutes, deleted when the step ends |
| Cookie | Purpose | Lifetime |
|---|---|---|
| attr, attr_last | The first and the latest source of your visit in this browser session: referring site, campaign tags or search term, without advertising click identifiers. We use them to understand which channels bring visitors. If you register, the first source is copied to your account. | Browser session (deleted when you close the browser) |
The information from these cookies stays with us and is not shared with advertisers or analytics companies. Page-view records linked to the device identifier are described in section 03 of the Privacy Policy with their retention periods.
- YouTube and Vimeo: some company pages show a company's own video. Nothing is loaded from YouTube or Vimeo until you press play; only then does your browser contact that service, which may set its own cookies under its policies. We use the privacy-enhanced embed modes of both.
- Map tiles: company pages with a map load tiles from OpenFreeMap. It sets no cookies but receives your IP address, as any website you load content from does.
- Telegram: the Telegram sign-in button loads a script from telegram.org when you use it.
We do not use advertising cookies, social-media pixels or third-party analytics tools.
You can view, block and delete cookies in your browser settings. If you block the cookies in section 01 the site will not work properly (for example, you will not stay signed in). If you block __Host-device_uuid you may be asked for a confirmation code more often when you sign in. Blocking the cookies in section 02 does not affect how the site works.
Deleting cookies in your browser does not delete data already recorded on our side. To have that removed, use the options in section 11 of the Privacy Policy.
When we add, remove or change a cookie, we update this page and the date at the top.