The short version
ALM Talent uses only the cookies and browser storage it needs to work. That means keeping you signed in, keeping the site secure, and remembering your selection. We use no advertising cookies, no analytics or tracking tools, and no social media pixels. We also serve our fonts ourselves, so your browser does not contact a font provider when you visit.
Because we only use what is necessary, we do not show a cookie banner. [Lawyer to confirm; see note K1.]
1. What cookies and browser storage are
Cookies are small files a website saves in your browser. Browser storage (called "local storage") works in a similar way but stays on your device. Our server does not read it unless the page sends it.
2. What we use
| Name | Type | What it does | How long it lasts | Who sets it |
|---|---|---|---|---|
| [alm_session] | Cookie, necessary | Keeps you signed in, so the site knows which account is yours. It cannot be read by page scripts (HttpOnly), is sent only over secure connections, and is restricted to our site | Team: 12 hours, or 30 days if you tick "Keep me signed in". Talents: 7 days, or 30 days if you tick "Keep me signed in". Clients: until you sign out, and never past the end of your pass | ALM Talent |
| [alm_xsrf] | Cookie, necessary | Protects forms against cross-site request forgery | Session | ALM Talent |
| [alm_trusted_device] | Cookie, necessary (only if you choose it) | Remembers that you completed two-step sign-in on this browser ("Trust this browser for 30 days"). Clients see the option as "Remember this device for 30 days" | 30 days | ALM Talent |
| [alm_selection] | Local storage, necessary for the feature | Your My selection: the talent numbers you hearted, up to 30. It stays on your device and is sent to us only if you share the selection or send it to ALM | Until you clear it or remove the talents | ALM Talent |
| [other local preferences, if any] | Local storage | [Build to list, e.g. grid or list view] | [ ] | ALM Talent |
| Cloudflare Turnstile | Security check on forms | Checks that a person, not a bot, is filling in a form. Cloudflare processes your IP address and browser signals to do this. [Build to list any cookie or storage item Turnstile sets] | [ ] | Cloudflare |
Videos.
- Videos hosted by ALM play in our video provider's player (Bunny.net). [Build to confirm whether the player sets any cookie.]
- Videos hosted elsewhere. A talent may link a showreel hosted on YouTube (shown in privacy-enhanced mode, via youtube-nocookie.com), Vimeo or Google Drive. When you play one of these, that provider may set its own cookies, under its own privacy policy. [Recommended for the build: show a placeholder and load the outside player only when you click play.]
Payments. Premium payments and client pass payments happen on Stripe's own checkout pages. Stripe uses its own cookies there, under Stripe's privacy policy.
ALM team only. The desktop ALM Connector opens a status page on the team member's own computer, at 127.0.0.1. It uses a one-time sign-in cookie that never leaves that computer.
3. Your choices
- Clear or block. You can clear or block cookies and local storage in your browser settings.
- What breaks. If you block the necessary cookies, you will not be able to sign in. If you clear local storage, your selection is emptied.
- Nothing else to switch off. We do not use optional cookies, so there is nothing to turn off on our side.
4. Changes
If we ever add a cookie that is not necessary, for example for analytics, we will update this notice and ask for your consent first.
5. Contact
[ALM Media LLC (exact name to be confirmed)],