CrewSteps is owned and operated by Norka Enterprises Inc., doing business as Norka Consulting ("we," "us," or "our"). This policy explains cookies and similar technologies on crewsteps.com and app.crewsteps.com and the controls available to you.
Questions? Email info@crewsteps.com. Read our Website Privacy Policy or App Privacy Policy.
1. What cookies are
Cookies are small files your browser stores when you visit a website. Similar technologies include local storage, session storage, tags and scripts. These can remember sign-in, preferences and optional advertising measurement. First-party cookies are set for CrewSteps; third-party services can use their own technologies.
2. The cookies we use
- Strictly necessary: keep the Services working, protect sign-in and remember privacy choices. Our advertising controls do not disable these.
- Functional: remember choices and support features you request.
- Advertising and measurement: the Google Ads tag measures public website visits and successful employer trial signups. Google Ads measurement starts on for US visitors unless they opt out. Outside the US, or when location is unavailable, it stays off until allowed. Saved opt-outs, Global Privacy Control and Do Not Track take priority. When measurement is off, tags and cookieless advertising pings are blocked.
Google Ads is the advertising tool enabled for these public pages. Meta and Google Analytics are not currently configured. This implementation disables remarketing, Google signals and enhanced conversions; it does not use workplace data for advertising. No server-side advertising conversion sender is installed.
We do not sell personal information for money. Disclosure of online identifiers or browsing and conversion information to an advertising partner may qualify as sale, sharing or targeted advertising under applicable privacy laws. Use Cookie settings to opt out.
Storage inventory reviewed October 10, 2026| Provider | Cookie or storage name | Purpose | Duration | Category |
|---|
| CrewSteps | crewsteps_cookie_choice | Remembers your advertising choice across the website and app; no advertising identifier. | 180 days | Necessary |
| CrewSteps | crewsteps_cookie_notice | Remembers that you closed the cookie notice; closing it does not grant or withdraw permission. | 180 days | Necessary |
| CrewSteps | crewsteps_session | Secure, HttpOnly sign-in session. | Up to 14 days; removed on sign-out | Necessary |
| CrewSteps | crewsteps_signup_confirmation | Secure, HttpOnly receipt for a completed trial and continuation to phone setup. | 15 minutes or until continuing | Necessary |
| CrewSteps | crewsteps_ws_state; crewsteps_ms_state | Protect supported Google Workspace and Microsoft connection requests. Set only when that flow is used. | 10 minutes | Necessary |
| CrewSteps | crewsteps.sidebar.collapsed; crewsteps.navigation.v1.* | Remember sidebar and mobile navigation choices in local storage. | Until changed or browser data is cleared | Functional |
| CrewSteps | crewsteps:guide:v2:*; crewsteps:notification-bell:* | Keep walkthrough progress and notification display state in session storage. | Browser tab session | Functional |
| CrewSteps | crewsteps:career-saved:*; crewsteps:application-draft:* | Save jobs or an application draft when the applicant requests it; not shared with advertising providers. | Until removed, submitted (draft), or browser data is cleared | Functional |
| CrewSteps | crewsteps.marketing-campaign | Optional tab storage carrying campaign parameters between public pages while advertising measurement is enabled. URLs can carry those parameters without browser storage. | 30 minutes or browser tab session, whichever ends first | Advertising / measurement |
| CrewSteps | crewsteps_signup_attribution | Optional first-party campaign-source cookie after consent. Source information also accompanies the requested signup and internal signup notice. | 30 days | Advertising / measurement |
| CrewSteps | crewsteps.ads-signup.* | Local marker containing a random receipt ID to prevent counting the same trial again. Written only for a successful trial while measurement is enabled; retained on opt-out to prevent duplicate counts. | Until browser data is cleared | Measurement deduplication |
| Google Ads | _gcl_aw; _gcl_au | Google-documented first-party conversion measurement cookies that may be set while measurement is enabled, depending on an ad click and tag behavior. They are not sign-in cookies. | 90 days (Google-documented default; browser limits may shorten this) | Advertising / measurement |
The CrewSteps entries above were verified against the application code. Google cookie names and durations are documented in Google’s advertising cookie inventory; which cookies appear can vary with the browser and ad click. We do not list unconfigured Meta or Google Analytics cookies as active.
Phone sign-in uses Firebase Authentication with in-memory authentication persistence and Google reCAPTCHA for abuse prevention. Google’s security technology can use additional storage when the sign-in challenge is requested; see Google’s cookie information. User-requested external video, payment and organization-connected services may use their own storage. Their behavior depends on the service selected; these are not CrewSteps advertising tags.
3. Third parties
While advertising measurement is enabled, Google can receive technical information such as IP address, browser or device information, a public page URL with campaign parameters, and an anonymous trial-conversion receipt ID. We do not add signup form contents, names, email addresses, passwords, phone numbers, employee or patient information, document or message content, or private account-setup URLs to advertising events.
Advertising tags are excluded from authenticated app screens, CRM/client workflows, intake and appointment workflows, document pages and other sensitive services. Cookie consent does not authorize disclosure of sensitive workplace or health information. Google’s handling of data is described in How Google uses information from sites that use its services. Our privacy responsibilities and your applicable rights continue to apply.
4. Your choices
Google Ads measurement starts on for US visitors unless they opt out. Outside the US, or when location is unavailable, it stays off until allowed. Saved opt-outs, Global Privacy Control and Do Not Track take priority. Our hosting provider supplies an approximate country from the request IP address; we do not infer it from your language or device settings. Closing the cookie notice only hides the notice.
- Cookie settings: use the footer link on the website or app to allow or decline advertising measurement. Declining stops loading advertising tags, prevents future advertising events and unloads tags already running. The signup form stays in place with your entered details; other advertising pages may refresh. Necessary sign-in storage stays available.
- Global Privacy Control: GPC is treated as an advertising opt-out and takes priority over an earlier permission. We also honor Do Not Track. If you are signed in when an opt-out is received, it is saved to your account.
- Account choices: declining while signed in saves an account-level advertising opt-out. This is checked before advertising can load on another browser with a signed-in session. You can change that preference explicitly through Cookie settings; a continuing browser privacy signal keeps advertising off.
- Browser settings: you can block or delete site data. Blocking necessary storage may prevent sign-in and requested features.
- Google settings: manage Google ad preferences in My Ad Center.
- Industry opt-out: participating companies offer additional choices at aboutads.info/choices.
The shared preference cookie applies to crewsteps.com and app.crewsteps.com in the same browser for 180 days. Clearing cookies or using another browser may require another choice; account opt-outs apply when we can identify the signed-in account. If account preferences cannot be checked, advertising stays off. A GPC signal remains effective while your browser sends it. Choices cannot undo information already transmitted before withdrawal. Google and industry settings supplement our controls and may not block all tracking.
Open cookie settings
5. Changes to this policy
We update this policy and its effective date when our tools or practices change. This policy covers crewsteps.com and app.crewsteps.com. It does not cover norkaconsulting.com or other external sites.