01 What cookies are
Cookies are small text files that remember things — your theme, your session, whether you’ve seen our banner. We use a short, documented list of them, and none for advertising without your consent.
Cookies are small text files placed on your device by a website. Related technologies — localStorage, sessionStorage, pixels, and SDK identifiers — serve similar purposes, and this policy covers them all (collectively, “cookies”). Cookies can be first-party (set by us) or third-party (set by services we embed), and session (deleted when the browser closes) or persistent (stored for a defined duration).
02 Categories we use
| Category | Consent | What it does |
|---|---|---|
| Strictly necessary | Always on | Security, session management, load balancing, cookie-consent memory, and theme preference. The site cannot function without these; they cannot be switched off in our tools. |
| Functional | Opt-in | Remember choices that improve your experience — language, region, video player settings, saved form progress. |
| Performance & analytics | Opt-in | Help us understand how visitors use the site — pages visited, time on page, errors — so we can improve content and navigation. Data is analyzed in aggregate. |
| Targeting & advertising | Opt-in | Used only if enabled for a specific campaign (e.g., LinkedIn Insight for B2B campaign measurement). We run no targeting cookies by default and none at all when you decline or send a GPC signal. |
03 Cookie inventory
The current cookies in use on renewhr.com:
| Name | Provider | Category | Duration | Purpose |
|---|---|---|---|---|
| rhr_session | Renew HR (first-party) | Strictly necessary | Session | Maintains your secure session state |
| rhr_consent | Renew HR (first-party) | Strictly necessary | 12 months | Records your cookie-consent choices so we don’t re-ask on every visit |
| theme | Renew HR (first-party) | Strictly necessary | Persistent (localStorage) | Remembers dark/light mode preference |
| rhr_csrf | Renew HR (first-party) | Strictly necessary | Session | Protects forms against cross-site request forgery |
| _ga / _ga_* | Google Analytics | Performance | Up to 13 months | Distinguishes visitors for aggregate usage statistics (IP anonymization enabled) |
| li_fat_id | Targeting | 30 days | B2B campaign measurement — set only with consent during active campaigns | |
| yt-player-* | YouTube (privacy-enhanced mode) | Functional | Persistent | Remembers embedded video player settings; loads only when you play a video |
This inventory is reviewed quarterly. If a listed provider changes its cookie names or durations, we update this table at the next review.
04 Cookies in the Benefits Reimagined platform
Benefits Reimagined uses strictly necessary cookies only: SAP BTP authentication and session cookies (e.g., XSUAA session tokens), CSRF protection, and load-balancer affinity cookies. The platform contains no advertising or cross-site tracking technologies. In-platform analytics (ElasticSearch/Kibana dashboards) operate on server-side event data under the plan sponsor’s processor agreement — not on third-party tracking cookies. Employee benefits data is never used for advertising.
05 Managing your preferences
Three ways to control cookies: our Cookie Preferences center (footer link), your browser settings, and industry opt-out tools. Declining optional cookies never blocks you from the site.
Cookie Preferences center
Use the “Cookie Preferences” link in the footer of every page to review and change your consent for functional, performance, and targeting cookies at any time. Your choice is stored in the rhr_consent cookie and applied immediately — withdrawing consent stops the associated cookies from being set and expires existing ones at their next read.
Browser controls
All major browsers let you block or delete cookies: Chrome (Settings → Privacy and security → Cookies), Safari (Preferences → Privacy), Edge (Settings → Cookies and site permissions), Firefox (Settings → Privacy & Security). Blocking strictly necessary cookies may prevent parts of the site from working.
Industry opt-outs
For analytics, install the Google Analytics opt-out add-on. For interest-based advertising generally, visit the DAA’s optout.aboutads.info or the NAI’s optout.networkadvertising.org.
06 Global Privacy Control & Do Not Track
Our website recognizes the Global Privacy Control (GPC) signal. When your browser sends GPC, we automatically treat it as an opt-out of targeting cookies and of any “sale” or “sharing” of personal information for that browser — no banner interaction required — consistent with the CCPA/CPRA, Colorado Privacy Act, Texas TDPSA, and other state laws that mandate universal opt-out recognition. Because no consistent industry standard exists for the older “Do Not Track” header, we treat DNT the same way we treat GPC rather than ignoring it.
07 Changes to this policy
When we add or remove cookies or providers, we update the inventory in Section 3 and the effective date above. If a change introduces a new category requiring consent, the consent banner will re-prompt you before any new cookie is set.
08 Contact
Privacy Office — Renew HR
Email: privacy@renewhr.com · Phone: +1-(972) 440-0306
See our Privacy Policy for how we handle personal information more broadly, including your state privacy rights.