No optional analytics, advertising or marketing cookies are currently used on this careers site.
Candidate-facing pages do not load analytics tags, advertising pixels or cross-context tracking tools, and the careers application does not set a first-party cookie on those pages. There are no optional cookie preferences to save, so we do not show a consent banner or preference panel.
Limited browser storage is used for site reliability, and separate storage may be used in the staff sign-in area. Both are described below.
| Area | Technology | Purpose and retention |
|---|---|---|
| Public careers pages | No application-set cookies | No analytics, advertising, marketing or personalisation cookie is set by the careers application. |
| Application forms | No persistent browser storage | Details remain in the open page while you complete a form and are sent to the recruitment API only when you submit them. The application does not save draft answers in cookies, local storage or session storage. |
| Deployment recovery | Session storage key beginning nta-deployment-recovery: | Created only after a page detects that a required JavaScript or style asset failed to load. It records the last recovery attempt to prevent a reload loop and normally lasts only for that browser tab session. |
| Staff sign-in | Google (Firebase Authentication) browser storage | Maintains authorised staff sign-in between visits. Sign-in state may persist until staff sign out or clear site data; security controls may also end access. |
| Staff sign-in protection | Google reCAPTCHA | May be used for staff sign-in security to prevent fraud and automated abuse. Google may use cookies or browser storage for these checks and controls their retention. Staff can clear this storage through their browser’s site-data controls. |
The public site uses ordinary network requests to deliver pages, job listings and application services. Vercel hosts the website, while Google Cloud hosts the recruitment API and related services. Those providers may process request information such as IP address, time, requested URL, browser or user-agent information, referrer, response status and security events in operational logs. These server-side records are not browser cookies.
The one public browser-storage item is the deployment-recovery session key listed above. It is strictly limited to recovering from a failed site update and is not used to identify a candidate, measure audiences or follow anyone across sites.
Our staff sign-in area uses essential browser storage to maintain secure access for authorised recruitment staff. These sign-in features are separate from the candidate application process.
- Vercel delivers the public website and may create server-side access and security logs. No Vercel Analytics browser script is currently loaded by this site.
- Google Cloud operates the recruitment API, database and private file storage. Public application requests use HTTPS rather than a cookie-based login session.
- Google (Firebase Authentication and reCAPTCHA) provides staff sign-in and abuse-prevention services as described in the inventory above.
- Unsplash hosts some page images. When an image loads, the browser sends an ordinary request to Unsplash that can include an IP address and user-agent and, depending on the page, referrer. We did not observe an Unsplash cookie being set by those image requests.
Links to other websites are not embedded trackers. If you follow one, that provider’s privacy and storage practices apply on its site.
Because no optional cookie category is active, there is no optional setting to switch on or off. You can clear the deployment-recovery session key through your browser’s site-data controls. Doing so does not affect an application that has already been submitted.
We do not sell candidate application information or share it for cross-context behavioural advertising. This is why this page does not present a sale/share toggle. This does not limit any privacy right you may have: see the Candidate Privacy Notice or contact us to make a request.
If optional analytics, advertising, marketing or personalisation technology is proposed later, we will review it before activation, update this inventory and provide a working consent or opt-out control wherever the law requires one.
We may update this notice when the site or its providers change. The date at the top shows the most recent revision.
For questions about this inventory or a privacy request, contact: