Cookie policy
What we store on your device, why, for how long, and how to change your mind.
This policy explains every cookie, pixel and storage key that SmallJobs.ro uses. It is written to be verifiable: each row in the tables below corresponds to an actual line in the application's source. The legal basis is Article 4(5) of Romanian Law no. 506/2004, transposing the ePrivacy Directive, together with Articles 4(11), 6 and 7 GDPR.
The basic rule
Strictly necessary cookies — the ones without which the site simply does not work — are used without asking you, because the law does not require us to ask and because they do not track you.
Analytics and marketing cookies depend on your consent, and that consent is given separately for each of the two categories. The Google Analytics, Meta and TikTok scripts load on the page but start in a suspended state and transmit no tracking data until you accept the category they belong to. If you decline, they stay inactive.
Declining is as easy as accepting: the "Reject all" button sits next to "Accept all", at the same level, the same size and with the same prominence. We do not block your access to the site and we do not limit any feature if you decline — including signing in with Google, Facebook or Apple, which works regardless of your choice.
How you choose, and how you change your mind
On your first visit we show a bar at the bottom of the page, with "Accept all" and "Reject all" side by side, plus a "Settings" button. The bar does not block the site: you can keep browsing, and if you choose nothing, nothing is switched on.
Under "Settings" you can accept the analytics category (Google Analytics) and the marketing category (Meta Pixel and TikTok Pixel) separately. The toggles start off and stay off unless you turn them on yourself. Strictly necessary cookies are listed there for information, marked "Always on".
You can change your mind at any time by pressing "Cookie settings" on the Privacy Policy page or on this page. Withdrawing consent is as easy as giving it, takes effect immediately, costs you nothing, and you lose access to no feature of the Platform.
We keep your choice for one year, together with the date you made it and the policy version in force at the time, so that we can demonstrate the basis on which we process data (art. 7(1) GDPR). If we change the categories or the providers, we ask you again.
Strictly necessary cookies (no consent required)
These make the Platform work: they keep you signed in, protect you against CSRF attacks, remember your chosen language, and remember your cookie decision itself.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| next-auth.session-token | SmallJobs (NextAuth) | Keeps your session signed in | Session |
| next-auth.csrf-token | SmallJobs (NextAuth) | Protects against CSRF attacks at sign-in | Session |
| next-auth.callback-url | SmallJobs (NextAuth) | Remembers where to return you after sign-in | Session |
| smalljobs_ga_consent | SmallJobs | Remembers your cookie decision so we do not ask on every page | 1 year |
| deviceId | SmallJobs | Identifies the device for session security and for moving your account between the mobile app and the browser | 1 year |
| sj-visitor-location | SmallJobs | Remembers the locality you chose so you do not re-enter it every visit | 30 days |
| NEXT_LOCALE | SmallJobs (next-intl) | Remembers your chosen language (Romanian or English) | 1 year |
Analytics cookies (consent required)
These show us, in aggregate, which pages are used and where people get stuck, so we can fix things. We do not use them for advertising.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Google Analytics 4 (G-P09G59MFME) | Distinguishes unique visitors | 2 years |
| _ga_G-P09G59MFME | Google Analytics 4 | Maintains analytics session state | 2 years |
| _gid | Google Analytics | Distinguishes visitors (older cookie) | 24 hours |
Advertising and measurement cookies (consent required)
These let us measure whether the advertising we pay for brings people to the site, and build audiences for campaigns. If you refuse this category, the pixels stay inactive and transmit nothing.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| _fbp | Meta Pixel (1133579474931029) | Browser identifier for measuring and targeting Facebook and Instagram advertising | 3 months |
| fr | Meta (facebook.com) | Advertising delivery | 3 months |
| _ttp | TikTok Pixel (D55F2DBC77UAQNS9IVD0) | Correlates visits for TikTok advertising measurement | 13 months |
What we actually transmit to TikTok and Meta
We would rather be explicit here, because this is the part most sites pass over in silence. If you accept the advertising category, the pixels transmit your IP address, device and browser information, the pages you visit and certain actions you take (for example publishing a listing or submitting an application).
In addition, we transmit your e-mail address and phone number to TikTok as SHA-256 hashes, for the "advanced matching" function that links a visit to an advertising account. The emphasis matters: applying a hash function does not anonymise data — the result remains pseudonymised personal data. This transmission happens only if you accepted the advertising category, and stops if you withdraw consent.
We never transmit the content of your private messages, your password or your payment details to these providers.
Joint controllers
For the collection and transmission stage carried out by the Meta and TikTok pixels, we and those providers are joint controllers within the meaning of Article 26 GDPR. This follows from the Court of Justice of the European Union's judgment in Case C-40/17 (Fashion ID), which held that a site operator embedding a third-party module decides jointly with the provider on the purposes and means of that stage.
The practical consequence for you: you may exercise your GDPR rights both against us and directly against Meta or TikTok, and we cannot rely on our arrangement with them to refuse you. You can write to us at contact@smalljobs.ro. For the processing those providers carry out afterwards on their own platforms, they are responsible alone, under their own privacy policies.
Google Analytics and the artificial intelligence service we use operate under a different regime: there, Google acts as our processor under Article 28 GDPR.
Local storage in your browser
These are not cookies and never leave your device for us or for third parties. We use them so you do not lose your work and so we do not ask you the same thing twice. You can delete them at any time from your browser settings.
| Key | Type | Purpose |
|---|---|---|
| smalljobs-theme | localStorage | Your chosen theme: light, dark or follow the system |
| deviceId | localStorage | Local copy of the device identifier |
| jobEditData, jobPreviewData | localStorage | The draft listing you are writing, so you do not lose it if you close the page |
| sj.viewMode.<page> | localStorage | List or grid display preference, per page |
| pwa-install-dismissed, pwa-installed | localStorage | Remembers that you declined or installed the app |
| jobita-state | localStorage | Remembers which Jobiță mascot messages you dismissed |
| contact-pill-hidden | localStorage | Remembers that you hid the help button |
| jobita-session, jobita-shown | sessionStorage | Limits how many messages appear in a single session |
| sj-scroll:<key> | sessionStorage | Returns you to where you were when you press back |
| Cache Storage | Service Worker | Static assets for offline operation of the installed app (PWA) |
The mobile app
The Android and iOS apps do not use cookies; they use a software development kit. We use Firebase Analytics, from Google, for aggregate usage statistics: app opens, screens visited, and actions such as publishing a listing.
Firebase Analytics is configured NOT to collect persistent advertising identifiers — neither IDFA on iOS nor Advertising ID on Android. That is why the app does not show you Apple's App Tracking Transparency prompt: there is nothing to ask you for, because we do not track across apps. The mobile app contains no Meta or TikTok kit.
Mobile analytics is on by default and you can turn it off at any time under Settings → Privacy, without losing any functionality. Push notifications work through Firebase Cloud Messaging and require operating-system permission before being enabled.
How long we keep your decision
Your decision is kept for one year in the smalljobs_ga_consent cookie, together with when you made it and which categories you accepted. We keep that record because Article 7(1) GDPR requires us to be able to demonstrate that consent was obtained. After a year we ask again.
If you clear your browser cookies you also clear that record, and you will see the banner again on your next visit.
How to block cookies in your browser or at the provider
- Your browser settings let you block or delete all cookies. Note: if you block strictly necessary cookies, sign-in will stop working.
- Google: you can manage analytics and advertising data at myaccount.google.com/data-and-privacy.
- Meta: advertising preferences are at facebook.com/ads/preferences.
- TikTok: opt out of personalised advertising at ads.tiktok.com/i18n/optout.
- Mobile app: Settings → Privacy, the analytics toggle.
Changes to this policy
If we add a new cookie or provider, we update this page before switching it on and, if the new cookie requires consent, we ask you again. We do not quietly add a tracking tool to a category you already accepted.
If you notice a cookie on the site that does not appear in the tables above, please write to contact@smalljobs.ro — that is a bug we want to hear about.
Last updated: 9 September 2026