Legal
Cookie policy
Effective 7 September 2026
The whole list fits on one screen: a cookie that remembers your answer, a signed-in session and a bot check on the account pages, and — if and only if you say yes — Google Analytics. No advertising, no pixels, no tracking across other sites.
1.What cookies are, and who sets them
Cookies are small text files a website stores in your browser. This policy also covers the similar things a browser can hold, such as local storage and IndexedDB, because the law treats them in the same way. It is issued by Jobiit Technologies Limited, trading as Workbay, and covers workbay.ie, portal.workbay.ie and their staging equivalents. It should be read with our privacy policy.
2.Necessary — always on
These make the site work, or keep it secure, and need no consent.
| Name | Set by | Purpose | Lasts |
|---|---|---|---|
workbay_cookie_consent | Us, on workbay.ie | Remembers whether you accepted or rejected analytics, when, and which version of this policy you saw | 1 year |
Firebase Authentication session (local storage / IndexedDB, keys beginning firebase:) | Google Firebase, on the signup, billing, invitation and account pages of workbay.ie, and on every page of the portal | Keeps you signed in while you create your workshop, accept an invitation, open the billing portal or use the portal. Never read by any other site | Until you sign out or the browser clears it |
_GRECAPTCHA | Google reCAPTCHA Enterprise, on the same pages as the Firebase session | Tells a real browser from an automated one before an account request is served (Firebase App Check). Not used for advertising | 6 months |
| Cloudflare Turnstile (no cookie) | Cloudflare, on the signup form only | Confirms that a person, not a script, is creating the workshop. Turnstile evaluates technical signals about the browser and, by Cloudflare’s design, sets no cookie to identify you | For the duration of the check |
workbay_app_banner (session storage) | Us, on workbay.ie, on a phone only | Remembers that you closed the get-the-app bar at the top of the page, so it does not come back on the next page you open | Until the tab is closed |
| Server logs (not a cookie) | Our hosting | IP address, page, time and browser type, for security and rate limiting | 30 days |
The marketing pages of workbay.ie — home, features, inspections, pricing, contact, and these legal pages — set no cookie at all unless you accept analytics.
3.Analytics — only if you accept
We would like to know which pages are read, roughly where visitors come from and what kind of device they use, so that the site can be improved. For that we use Google Analytics 4, loaded through Google’s Firebase software, and it loads only after you press Accept in the cookie banner. Until then no analytics code runs and no analytics cookie exists. The portal carries no analytics at all.
| Name | Set by | Purpose | Lasts |
|---|---|---|---|
_ga | Google Analytics | Tells one visitor’s browser from another, with a random identifier | 2 years |
_ga_<id> | Google Analytics | Keeps the current visit together | 2 years |
What it collects: pages viewed, the page you came from, the country and region, the browser and device type, and the random visitor identifier. It is configured with advertising features off (Google is told, through its Consent Mode, that advertising storage and personalisation are denied) and with no user identifier, so it cannot be tied to your Workbay account. Google processes this data as our processor under the terms in our privacy policy, some of it in the United States under the EU-U.S. Data Privacy Framework.
If you reject, or never answer, none of this happens. If you accept and later change your mind, use “Cookie settings” in the footer of any page: collection stops immediately and the _ga cookies are removed.
Some builds of the site have analytics switched off altogether. In that case you will see no banner, and the site is in the “necessary — always on” state above and nothing more.
4.What we do not use
No advertising or marketing cookies. No Meta, Google Ads or TikTok pixels. No cross-site tracking, no fingerprinting for advertising, no A/B-testing scripts, no embedded social widgets, no chat widgets. The only third-party code that loads on this site is Firebase Authentication, reCAPTCHA Enterprise and Turnstile on the account pages, as listed above, and, with your consent, Google Analytics. Fonts are served from our own domain.
5.Your choices
- The banner on your first visit: Accept, Reject, or Manage to see the categories. Reject is one press, the same as Accept.
- Cookie settings, in the footer of every page, to change your answer at any time.
- Your browser, which can block or delete cookies for this or any site. Blocking the necessary ones will stop the account pages and the portal from keeping you signed in, and may stop the signup form from completing its bot check.
- The site does not respond to browser “Do Not Track” signals, because with analytics rejected there is nothing left to switch off.
6.Changes and contact
When this policy changes in a way that matters — a new cookie, a new purpose — the date at the top moves and the banner asks again, because your earlier answer was to a different question. Questions to hello@workbay.ie.