Cookie policy
The Stepstone Group UK Limited (“we”, “us”, “our”) is responsible for the website www.totaljobs.com.
Our website uses cookies and other similar technologies, which may include pixels, plugins, scripts, tags and device fingerprinting (which we collectively refer to as “cookies” in this Cookie Policy).
We use cookies for many reasons, for example to distinguish you from other users of our website or to see how you interact with our website. This helps us to provide you with a good experience when you browse our website, it also allows us to improve our website and it allows us to re-engage with our audience through advertisements on other websites.
This Cookie Policy describes:
- What are cookies;
- Our use of cookies;
- How you can manage cookies used on our website;
- Privacy;
- Further information; and
- Changes to this Cookie Policy.
What are cookies?
A cookie is usually a small file of letters and numbers that we store on your browser or the hard drive of your computer, smart phone, tablet or other electronic device. However, they can take a number of different forms, such as pixels, plugins, tags scripts and combinations of these technologies to allow ‘device fingerprinting’. Cookies use information that is transferred to or read from your device’s hard drive. Some cookies may collect personal data about you. You can find out more information about cookies and pixels on the Information Commissioner’s Officer (ICO) website (www.ico.org.uk).
First Party and Third Party Cookies and Pixels
Some cookies and pixels are referred to as “first party” which means they are placed by the website you are visiting – so in our case first party cookies and pixels are placed by Totaljobs’ own website. “Third party” cookies and pixels are placed by other organisations (with our permission) via the Totaljobs website, such as advertisers and social media platforms. They work by collecting information from your device and passing it directly back to the third party.
Our use of cookies
We want you to understand the different types of cookies that are used on our website. These may be set by us, or by third parties who provide functionality embedded in or connected to our website. We use a variety of types of cookies for the following purposes:
- Strictly necessary (essential) cookies: these are cookies strictly necessary for the provision of our website to you, for example, cookies that enable website content to be delivered securely and efficiently. Without these cookies, the website may fail to operate properly.
- Functionality cookies: these cookies are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region, search preferences, or your login details, if you choose this). Without these cookies, some parts of the website may not work as we intend them to.
- Performance cookies: these cookies allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily. Typically, these cookies do not seek to identify a particular visitor and the analysis is done at an aggregate and therefore anonymous level . However, in some cases you may remain identifiable because of the inclusion of one or more pieces of information. For instance, a member ID is assigned to you and we may use this to associate you with your use of the website where we need to resolve a complaint. For more information on how we process any personal data collected on the site, please read our privacy policy.
- Targeting & advertising cookies (including ad measurement): These cookies are used to deliver adverts more relevant to you and your interests, both on and off our website. They are also used to limit the number of times you see an advertisement as well as help measure the effectiveness of the advertising campaign. These cookies are usually placed by trusted third parties (such as advertising networks) who we have a relationship with. They remember that you have visited a website and this information is shared with other organisations such as advertisers. These third parties combine data that we share with them with data from other sources, such as their own websites. This combined data can then be used to ensure that we can better target our visitors with advertisements for roles on our website that are more relevant to you and others. For more information, visit www.youradchoices.com. Please note that by opting out of receiving targeted advertisements on one browser, device or app will not necessarily opt you out of all such adverts from all browsers, devices or apps.
You can find more information about the individual cookies we use on our website and the purposes for which we use them in the table at the end of this policy.
How to withdraw your consent to the use of cookies
You may withdraw your consent to targeting and advertising cookies at any time by selecting the appropriate settings in our consent management platform.
You can block most cookies (except for Flash cookies) by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you block all cookies (including essential cookies) you may not be able to access all or parts of our services, or you may experience reduced functionality when accessing certain services. The procedure to block cookies depends on which internet browser you are using:
Internet Explorer: To prevent new cookies from being installed and delete existing cookies:
http://windows.microsoft.com/en-GB/internet-explorer/delete-manage-cookies
Firefox: To prevent new cookies from being installed:
https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
Or to delete existing cookies:
https://support.mozilla.org/en-US/kb/delete-cookies-remove-info-websites-stored
Google Chrome: To prevent new cookies from being installed and delete existing cookies:
https://support.google.com/chrome/answer/95647?hl=en
Safari: To prevent new cookies from being installed and delete existing cookies:
http://help.apple.com/safari/mac/8.0/#/sfri11471
Where can I find more information about cookies?
Find out more about cookies, including how to disable/enable and delete them, at the following website www.aboutcookies.org.You can opt-out of receiving cookies from a range of ad servers by visiting www.youronlinechoices.com and following the instructions provided.
Privacy
We are committed to using cookies fairly and in accordance with applicable privacy rights. Please read our Privacy Policy for further information on how our use of cookies may involve processing your personal data. Our Privacy Policy can always be accessed at the foot of our website landing page (www.totaljobs.com).
Further information
If you have any queries relating to this Cookie Policy, please contact us via the email address dataprotectionofficerUK@stepstone.co.uk or by writing to us at:
Data Protection Officer
Blue Fin Building
110 Southwark Street
London
SE1 0TA
United Kingdom
Changes to this Cookie Policy
If this Cookie Policy changes, the revised policy will include a new effective date and will be posted on this page. Please check back regularly to keep informed of updates.
Last updated: 12 November 2026
Table of Cookies used on our website
Essential Cookies
| Vendor / Provider | Cookie name | Domain | Duration | Purpose |
| Adobe (Experience Cloud) (first-party) | AMCV_24D022CE527854F10A490D4D%40AdobeOrg | .totaljobs.com | 1 year | Cookie used by Adobe Experience Cloud to assign a unique visitor ID. This allows Adobe Analytics and related tools to track user behaviour across sessions and services. |
| Adobe (Experience Cloud) (first-party) | AMCVS_24D022CE527854F10A490D4D%40AdobeOrg | .totaljobs.com | Session | Set by the Adobe Experience Cloud ID Service to mark that visitor-ID resolution has already run in the current browsing session. |
| Auth0 (first-party) | auth0 | login.recruit.totaljobs.com | 3 days | Auth0 session layer cookie — identifies the authenticated recruiter session. |
| Auth0 (first-party) | auth0_compat | login.recruit.totaljobs.com | 3 days | Fallback cookie for single sign-on on browsers that don’t support SameSite=None. |
| Auth0 (first-party) | auth0-mfa-v2 | login.recruit.totaljobs.com | 7 days | Auth0 multi-factor-auth state cookie — remembers that MFA was recently completed. |
| Auth0 (first-party) | auth0-mfa-v2_compat | login.recruit.totaljobs.com | 7 days | Fallback MFA state cookie for browsers that don’t support SameSite=None. |
| Auth0 (first-party) | did | login.recruit.totaljobs.com | 1 year | Auth0 device identification cookie for attack protection and anomaly detection. |
| Auth0 (first-party) | did_compat | login.recruit.totaljobs.com | 1 year | Fallback device-identification cookie for browsers that don’t support SameSite=None. |
| Auth0 (first-party) | _legacy_auth0.{clientId}.is.authenticated | recruit.totaljobs.com | 23 hours | Auth0 SPA SDK — marker that the user has an active authenticated session. Legacy variant for Safari ITP compatibility. |
| Auth0 (first-party) | auth0.{clientId}.is.authenticated | recruit.totaljobs.com | 23 hours | Auth0 SPA SDK — marker that the user has an active authenticated session. |
| Auth0 (first-party) | a0.spajs.txs.{clientId} | recruit.totaljobs.com | 23 hours | Auth0 SPA SDK — in-flight transaction state for authorisation code / token exchange. |
| Auth0 (first-party) | _legacy_a0.spajs.txs.{clientId} | recruit.totaljobs.com | 23 hours | Legacy variant of the Auth0 SPA transaction state cookie for Safari ITP compatibility. |
| Stonly / Auth0 (first-party) | _csrf | login.recruit.totaljobs.com | 10 days | CSRF protection token for the Auth0 login/MFA/registration flow forms. |
| Totaljobs (first-party) | anonymousUserId | .totaljobs.com | 12 months | Internal anonymous user ID used to perform analytics, build user profiles and recommendations. |
| Totaljobs (first-party) | VISITOR_ID | .totaljobs.com | 12 months | Internal visitor ID — tracks user interactions with A/B tests, feature rollouts, and personalisation experiments. |
| Tealium (first-party) | CONSENTMGR | .totaljobs.com | 12 months | Captures that the cookie consent prompt has been shown and the user’s choice. Required for the CMP to remember consent across visits. |
| Tealium (first-party) | utag_main | .totaljobs.com | 12 months | First-party Tealium cookie — manages user session information across the site: unique visitor tracking, session ID, timestamps, custom logic. |
| StepStone Consent Manager (first-party) | consent_level | recruit.totaljobs.com | 12 months | StepStone’s consent-manager cookie — stores the user’s consent level selected for the HMP recruiter app. |
| StepStone Consent Manager (first-party) | vendor_selections | recruit.totaljobs.com | 12 months | Stores the per-vendor consent selections for the HMP recruiter app CMP. |
| StepStone Consent Manager (first-party) | vendor_version | recruit.totaljobs.com | 12 months | Records the version of the vendor list the user consented to — triggers a re-prompt when the vendor list changes. |
| Salesforce Commerce Cloud (first-party) | __Secure-has-sid | ecommerce.recruit.totaljobs.com | Session | Marker cookie — indicates that the SFCC session cookie is present, used to short-circuit cookie-less requests. |
| Salesforce Commerce Cloud (first-party) | inst | ecommerce.recruit.totaljobs.com | Session | Used to redirect requests to the correct Salesforce instance when bookmarks and emails route users via login.salesforce.com. |
| Salesforce Commerce Cloud (first-party) | oid | ecommerce.recruit.totaljobs.com | 12 months | Used to redirect a user to the correct Salesforce org and associate requests with the right customer tenant. |
| Salesforce Commerce Cloud (first-party) | sid_Client | ecommerce.recruit.totaljobs.com | Session | Used to validate orgid and userid on the client side. |
| Salesforce Commerce Cloud (first-party) | ssostartpage | ecommerce.recruit.totaljobs.com | 60 days | Identifies the Identity Provider (IdP) location for single sign-on flows. |
| Salesforce Commerce Cloud (first-party) | CookieConsentPolicy | ecommerce.recruit.totaljobs.com | 12 months | SFCC’s own cookie-consent-policy marker — applies end-user cookie consent preferences set by our customer. |
| Salesforce Commerce Cloud (first-party) | LSKey-c$CookieConsentPolicy | ecommerce.recruit.totaljobs.com | 12 months | SFCC localStorage-backed companion to CookieConsentPolicy — stores the per-vendor consent values. |
| Salesforce Commerce Cloud (first-party) | saml_request_id | ecommerce.recruit.totaljobs.com | 60 days | Correlates the outbound SAML authentication request with the incoming SAML response during SSO. |
| Salesforce Commerce Cloud (first-party) | logouturl | ecommerce.recruit.totaljobs.com | 60 days | Stores the post-logout redirect URL for the SFCC session. |
| Salesforce (third-party) | session | login.salesforce.com | Session | Core Salesforce login session cookie — required for cross-domain SSO handshake into SFCC. |
| Totaljobs (first-party) | AnonymousUser | www.totaljobs.com | 12 months | Tracks anonymous visitors to record behavioural data. Essential per ALWAYS_ON_COOKIES (StepStone identity). |
| Adobe (first-party) | sc_vid | .totaljobs.com | 1 year | Identifies unique visitors across sessions. Essential per ALWAYS_ON_COOKIES (Adobe Site Catalyst visitor ID). |
| Amplitude (first-party) | AMP_1c72c8cfad | .totaljobs.com | 12 months | Amplitude product-analytics browser-SDK cookie — anonymous device/user identifier. Essential per ALWAYS_ON_COOKIES wildcard AMP_*. |
| Salesforce Commerce Cloud (first-party) | BrowserId | .salesforce.com | 12 months | Used to log browser sessions/visits for internal-only product telemetry. Essential per ALWAYS_ON_COOKIES AND listed in the live /recruiters/cookies/ Essential section. Note: set as third-party on .salesforce.com but reaches recruiter sessions via the SFCC domain. |
| Salesforce Commerce Cloud (first-party) | clientSrc | ecommerce.recruit.totaljobs.com | Session | Validates the IP from where a user logs in. Essential per ALWAYS_ON_COOKIES (previously in Functionality). |
| Amazon Web Services (first-party) | AWSALBTGCORS | recruit.totaljobs.com | 7 days | CORS variant of the ALB target-group stickiness cookie — needed when the HMP SPA makes cross-origin requests. Essential per live /recruiters/cookies/ policy page (previously in Functionality). |
| Salesforce Commerce Cloud (first-party) | sid | ecommerce.recruit.totaljobs.com | Session | SFCC session identifier. Essential per ALWAYS_ON_COOKIES (SF section). Previously misclassified as Google in draft — fixed. |
Functionality Cookies
| Vendor / Provider | Cookie name | Domain | Duration | Purpose |
| Akamai (first-party) | AKA_A2 | .totaljobs.com | Session | Used for Akamai’s Advanced Acceleration feature, intended to improve web performance. |
| Amazon Web Services (first-party) | AWSALBTG | recruit.totaljobs.com | 7 days | AWS Application Load Balancer target-group stickiness — ensures the recruiter is routed to the same backend during a session. (The CORS variant AWSALBTGCORS is in Essential — matches live policy page.) |
| Amazon Web Services (third-party) | AWSALBCORS | www.stepstone.de | 7 days | AWS ALB CORS stickiness cookie set by a cross-site resource loaded from www.stepstone.de. Flagged for review — unexpected cross-brand infra cookie on www.totaljobs.com/recruiters/*. |
| Cloudflare (first-party) | __cf_bm | .login.recruit.totaljobs.com | Session | Cloudflare Bot Management — identifies and mitigates automated traffic against the Auth0 login origin. |
| Cloudflare (third-party) | __cf_bm | .linkedin.com | Session | Cloudflare Bot Management cookie set via LinkedIn Insight tag embedded on the pages. |
| Cloudflare (third-party) | __cf_bm | .slgnt.eu | Session | Cloudflare Bot Management cookie set via Selligent tag embedded on the pages. |
| Polylang (first-party) | pll_language | www.totaljobs.com | 12 months | Saves the chosen language for the WordPress recruiter marketing site. |
| Salesforce Commerce Cloud (first-party) | autocomplete | ecommerce.recruit.totaljobs.com | 60 days | Determines if the login page remembers the user’s username. |
| Salesforce Commerce Cloud (first-party) | PreferredLanguage0DMVl0000000VJyOAM | ecommerce.recruit.totaljobs.com | 12 months | Stores the recruiter’s preferred UI language for SFCC. The suffix is a per-org identifier. |
| Tripadvisor / mPulse (first-party) | RT | .www.totaljobs.com | 7 days | Round-trip real-user measurement cookie — collects client-side performance timings used by SOASTA mPulse. |
| Totaljobs (first-party) | analytics_sessionid | .recruit.totaljobs.com | Session | HMP analytics session correlation ID — groups page views and events in the authed recruiter app into a single visit. |
| Totaljobs (first-party) | analytics_sessionid | .login.recruit.totaljobs.com | Session | Same as above but scoped to the Auth0 login origin, so the pre-login analytics stitch to the post-login session. |
| LinkedIn (third-party) | li_gc | .linkedin.com | 6 months | Stores guest consent to the use of cookies for non-essential purposes — set by LinkedIn Insight tag on recruiter marketing pages. |
Performance Cookies
| Vendor / Provider | Cookie name | Domain | Duration | Purpose |
| Google (first-party) | _ga | .totaljobs.com | 1 year | Google Analytics — unique visitor ID used for aggregate reporting. |
| Google Analytics 4 (first-party) | _ga_F6MR9F9R5K | .totaljobs.com | 1 year | GA4 session cookie for the totaljobs.com property. Groups page views and events into a single visit. |
| Datadog RUM (first-party) | _dd_s | .totaljobs.com | Session | Datadog Real User Monitoring session-correlation cookie — short-lived session identifier so page loads, errors and timings cluster into a single visit for engineering investigation. |
| Datadog RUM (first-party) | _dd_s | recruit.totaljobs.com | Session | Same as above but scoped to the HMP recruiter SPA. |
| Datadog RUM (first-party) | _dd_s | login.recruit.totaljobs.com | Session | Same as above but scoped to the Auth0 login origin. |
| Datadog RUM (first-party) | _dd_s | www.totaljobs.com | Session | Same as above but scoped to the public recruiter marketing surface. |
Targeting & Advertising Cookies
| Vendor / Provider | Cookie name | Domain | Duration | Purpose |
| Adobe | demdex | .demdex.net | 6 months | Unique value with which Audience Manager can identify a user. Used for identification, segmentation, modelling and reporting. |
| Adobe | dpm | .dpm.demdex.net | 6 months | Data Provider Match — tells internal Adobe systems that a call is passing customer data for synchronisation or requesting an ID. |
| Adobe Ad Cloud / Everest | ev_sync_ax | .everesttech.net | 31 days | Stores the date when synchronisation of user IDs is performed with Adobe’s Media Optimizer bidding stack (variant: ax). |
| Adobe Ad Cloud / Everest | ev_sync_bk | .everesttech.net | 31 days | Same as ev_sync_ax but for the bk partner sync. |
| Adobe Ad Cloud / Everest | ev_sync_dd | .everesttech.net | 31 days | Same as ev_sync_ax but for the dd partner sync. |
| Adobe Ad Cloud / Everest | ev_sync_fs | .everesttech.net | 31 days | Same as ev_sync_ax but for the fs partner sync. |
| Adobe Ad Cloud / Everest | ev_sync_ix | .everesttech.net | 31 days | Same as ev_sync_ax but for the ix partner sync. |
| Adobe Ad Cloud / Everest | ev_sync_nx | .everesttech.net | 31 days | Same as ev_sync_ax but for the nx partner sync. |
| Adobe Ad Cloud / Everest | ev_sync_ox | .everesttech.net | 31 days | Same as ev_sync_ax but for the ox partner sync. |
| Adobe Ad Cloud / Everest | ev_sync_pm | .everesttech.net | 31 days | Same as ev_sync_ax but for the pm partner sync. |
| Adobe Ad Cloud / Everest | ev_sync_rc | .everesttech.net | 31 days | Same as ev_sync_ax but for the rc partner sync. |
| Adobe Ad Cloud / Everest | ev_sync_yh | .everesttech.net | 31 days | Same as ev_sync_ax but for the yh partner sync. |
| Adobe Ad Cloud / Everest | everest_g_v2 | .everesttech.net | 12 months | Stores the browser and surfer ID. Created after a user interacts with Adobe Ad Cloud’s advertising stack. |
| Adobe Ad Cloud / Everest | everest_session_v2 | .everesttech.net | Session | Stores the session ID for Adobe Ad Cloud’s advertising stack. |
| Advertiser’s website (first-party) | s_ecid | .totaljobs.com | 1 year | First-party mirror of the Adobe Experience Cloud visitor ID — allows persistent ID tracking when the AMCV cookie has expired. |
| Casale Media / Index Exchange | CMID | .casalemedia.com | 12 months | Collects visitor data for targeted advertising via Index Exchange. |
| Casale Media / Index Exchange | CMPRO | .casalemedia.com | 90 days | Collects data on visitor behaviour from multiple websites for frequency capping. |
| Casale Media / Index Exchange | CMPS | .casalemedia.com | 90 days | Companion to CMPRO — also used for targeted advertising. |
| Facebook (first-party) | _fbp | .totaljobs.com | 90 days | Used by Facebook to deliver real-time-bidding advertisement products from third-party advertisers. |
| IDE | .doubleclick.net | 1 year | Used for targeting, analytics and optimisation of ad campaigns in DoubleClick / Google Marketing Suite. | |
| Google (first-party) | _gcl_au | .totaljobs.com | 90 days | Used by Google AdSense for experimenting with advertisement efficiency across websites using their services. |
| bcookie | .linkedin.com | 12 months | Used by LinkedIn to track the use of embedded services. | |
| lidc | .linkedin.com | 23 hours | Used by LinkedIn for tracking the use of embedded services. | |
| Microsoft | MUID | .bing.com | 1 year | Identifies unique web browsers visiting Microsoft sites — used for advertising, site analytics, and other operational purposes. |
| Microsoft (first-party) | _uetsid | .totaljobs.com | 23 hours | Microsoft UET session ID — used by Bing to determine what ads should be shown to the end user. |
| Microsoft (first-party) | _uetvid | .totaljobs.com | 1 year | Microsoft UET visitor ID — tracking cookie that allows us to engage with a user that has previously visited our website. |
| Salesforce Commerce Cloud (first-party) | oinfo | ecommerce.recruit.totaljobs.com | 60 days | Used to track the State, Edition and orgID of a customer’s org — surfaces to Salesforce for support/analytics. |
| Selligent | sbss_959f868f-c0bb-4cab-a8ed-d60045d21605 | site-see.slgnt.eu | 12 months | Selligent Marketing Cloud session cookie — tracks interactions with Selligent-powered marketing emails/landing pages. |
| Selligent (first-party) | sbt_i | .totaljobs.com | 12 months | Selligent Marketing Cloud behavioural tracking — individual-level ID. |
| Selligent (first-party) | sbt_p | .totaljobs.com | 12 months | Selligent Marketing Cloud behavioural tracking — profile-level ID. |
| Wikimedia Foundation | WMF-Uniq | .upload.wikimedia.org | 1 year | Set by upload.wikimedia.org — fires when an image hosted on Wikimedia Commons is embedded in a recruiter settings page. Unexpected — flag for review: either remove the embed or document the vendor explicitly. |