Skip to main content

Cookie policy

Version 0.1.0 · Last updated: 2026-04-30

1. Introduction

This cookie policy explains what cookies and similar technologies Called 2 Work DBA Zia Code LLC(“Called 2 Work,” “we,” “us”) uses on called2work.com, why we use them, how long they last, and how you can change your choices at any time. It supplements the privacy policy.

For the purposes of this policy, “cookies” refers to both HTTP cookies set in your browser and equivalent storage mechanisms such as localStorage and sessionStorage. The GDPR ePrivacy regime and the CCPA both treat these mechanisms equivalently for consent purposes, so we disclose them together below.

2. Categories we use

We sort every cookie or storage entry into one of four categories. Strictly necessary entries cannot be turned off — the site does not function without them. Every other category is off by default and only activated after you have given explicit consent.

Always on

Required for the site to function: keeping you signed in, protecting against cross-site request forgery, and remembering session state. These cannot be turned off.

NameProviderPurposeStorageExpires
next-auth.session-tokenCalled2WorkAuthenticated user session (NextAuth.js).cookie30 days
next-auth.callback-urlCalled2WorkReturns you to the page you were trying to reach after sign-in.cookiesession
next-auth.csrf-tokenCalled2WorkProtects sign-in and account forms from cross-site request forgery.cookiesession
__cf_bmCloudflareBot-management and abuse prevention at the CDN edge.cookie30 minutes
Off by default · opt-in

Remember preferences you have set (such as your cookie-consent choices themselves) so we don't ask you again on every visit.

NameProviderPurposeStorageExpires
c2w-cookie-consentCalled2WorkStores your cookie-consent choices so we don't show the banner again on every visit.localStorage1 year
c2w-cookie-preferencesCalled2WorkStores per-category cookie preferences (functional, analytics, advertising) for use by the preference center.localStorage1 year
Off by default · opt-in

Help us understand how the site is used in aggregate so we can improve it. We only enable these with your consent.

No cookies or trackers in this category at this time.

Off by default · opt-in

Used to show relevant advertising. Called2Work does not currently run advertising of any kind, so this category is reserved for future use only and turning it on has no effect today.

No cookies or trackers in this category at this time.

3. Managing your preferences

You can change your cookie preferences at any time using the preference center. Your choices are remembered locally in your browser; if you are signed in, they are also recorded in your account's consent history so you have a durable record of what you agreed to and when.

You can also clear all site data from your browser's controls; the banner will reappear on your next visit so you can make a fresh choice. Withdrawing consent does not remove data we collected lawfully before the withdrawal.

4. Third-party cookies

We work with a small set of sub-processors. Some of them set their own cookies when their service is active in your browser session. The full sub-processor inventory — including each vendor's privacy policy and (where applicable) data processing addendum — is published at /legal/sub-processors and incorporated by reference here.

For users in the EU/EEA, our legal bases for the categories above are:

  • Strictly necessary: Article 6(1)(b) (performance of a contract) and Article 6(1)(f) (legitimate interests in keeping the service secure). No consent is required for these under the ePR exemption.
  • Functional, Analytics, Advertising: Article 6(1)(a) (consent), opt-in only.

UK users: equivalent provisions of the UK GDPR + PECR apply once the UK Art. 27 representative is appointed and the UK geo-block is lifted. Until then, signup is gated and these disclosures are advisory.

6. CCPA / CPRA (California)

Called 2 Work does not “sell” or “share” personal information for cross-context behavioral advertising, as those terms are defined under the CCPA / CPRA. The advertising category above is reserved for future use only and is not active. Should we ever activate it, we will provide a functional “Do Not Sell or Share My Personal Information” opt-out before any data is shared.

7. Children

Called 2 Work is not directed to anyone under 18 and we do not knowingly collect personal data — including cookie data — from anyone under 18. See the Terms of Service for the full eligibility rule.

8. Updates to this policy

We may update this cookie policy as the service or the surrounding law changes. The version and effective date at the top of the page track every published revision. Material changes (new category, new vendor, new tracker) are also surfaced in the preference center the next time you visit.

Contact

For privacy or cookie questions, email [email protected]. The data controller's full address is published in the privacy policy.