1. Introduction
This cookie policy explains what cookies and similar technologies Called 2 Work DBA Zia Code LLC(“Called 2 Work,” “we,” “us”) uses on called2work.com, why we use them, how long they last, and how you can change your choices at any time. It supplements the privacy policy.
For the purposes of this policy, “cookies” refers to both HTTP cookies set in your browser and equivalent storage mechanisms such as localStorage and sessionStorage. The GDPR ePrivacy regime and the CCPA both treat these mechanisms equivalently for consent purposes, so we disclose them together below.
2. Categories we use
We sort every cookie or storage entry into one of four categories. Strictly necessary entries cannot be turned off — the site does not function without them. Every other category is off by default and only activated after you have given explicit consent.
Strictly necessary
Always onRequired for the site to function: keeping you signed in, protecting against cross-site request forgery, and remembering session state. These cannot be turned off.
| Name | Provider | Purpose | Storage | Expires |
|---|---|---|---|---|
| next-auth.session-token | Called2Work | Authenticated user session (NextAuth.js). | cookie | 30 days |
| next-auth.callback-url | Called2Work | Returns you to the page you were trying to reach after sign-in. | cookie | session |
| next-auth.csrf-token | Called2Work | Protects sign-in and account forms from cross-site request forgery. | cookie | session |
| __cf_bm | Cloudflare | Bot-management and abuse prevention at the CDN edge. | cookie | 30 minutes |
Functional
Off by default · opt-inRemember preferences you have set (such as your cookie-consent choices themselves) so we don't ask you again on every visit.
| Name | Provider | Purpose | Storage | Expires |
|---|---|---|---|---|
| c2w-cookie-consent | Called2Work | Stores your cookie-consent choices so we don't show the banner again on every visit. | localStorage | 1 year |
| c2w-cookie-preferences | Called2Work | Stores per-category cookie preferences (functional, analytics, advertising) for use by the preference center. | localStorage | 1 year |
Analytics
Off by default · opt-inHelp us understand how the site is used in aggregate so we can improve it. We only enable these with your consent.
No cookies or trackers in this category at this time.
Advertising
Off by default · opt-inUsed to show relevant advertising. Called2Work does not currently run advertising of any kind, so this category is reserved for future use only and turning it on has no effect today.
No cookies or trackers in this category at this time.
3. Managing your preferences
You can change your cookie preferences at any time using the preference center. Your choices are remembered locally in your browser; if you are signed in, they are also recorded in your account's consent history so you have a durable record of what you agreed to and when.
You can also clear all site data from your browser's controls; the banner will reappear on your next visit so you can make a fresh choice. Withdrawing consent does not remove data we collected lawfully before the withdrawal.
4. Third-party cookies
We work with a small set of sub-processors. Some of them set their own cookies when their service is active in your browser session. The full sub-processor inventory — including each vendor's privacy policy and (where applicable) data processing addendum — is published at /legal/sub-processors and incorporated by reference here.
5. Legal bases (GDPR / UK GDPR)
For users in the EU/EEA, our legal bases for the categories above are:
- Strictly necessary: Article 6(1)(b) (performance of a contract) and Article 6(1)(f) (legitimate interests in keeping the service secure). No consent is required for these under the ePR exemption.
- Functional, Analytics, Advertising: Article 6(1)(a) (consent), opt-in only.
UK users: equivalent provisions of the UK GDPR + PECR apply once the UK Art. 27 representative is appointed and the UK geo-block is lifted. Until then, signup is gated and these disclosures are advisory.
6. CCPA / CPRA (California)
Called 2 Work does not “sell” or “share” personal information for cross-context behavioral advertising, as those terms are defined under the CCPA / CPRA. The advertising category above is reserved for future use only and is not active. Should we ever activate it, we will provide a functional “Do Not Sell or Share My Personal Information” opt-out before any data is shared.
7. Children
Called 2 Work is not directed to anyone under 18 and we do not knowingly collect personal data — including cookie data — from anyone under 18. See the Terms of Service for the full eligibility rule.
8. Updates to this policy
We may update this cookie policy as the service or the surrounding law changes. The version and effective date at the top of the page track every published revision. Material changes (new category, new vendor, new tracker) are also surfaced in the preference center the next time you visit.
Contact
For privacy or cookie questions, email [email protected]. The data controller's full address is published in the privacy policy.