Cookie Notice

Effective 09-09-2026.

This Cookie Notice explains how Workforce Catalyst uses cookies and browser storage on the Workforce Catalyst website and Services. ## 1. What We Use Workforce Catalyst uses one essential first-party session cookie, one short-lived browser-session storage item, Google Analytics cookies on public website pages where Analytics is enabled, and PostHog browser storage on pages where product analytics is enabled. We use analytics to understand website traffic, product usage, feature adoption, navigation, engagement, and usability, not for advertising, remarketing, or cross-site behavioral advertising. We do not currently use advertising cookies, social-media pixels, session replay, or browser fingerprinting. ## 2. Essential Session Cookie **Name:** `wc_session` **Provider:** Workforce Catalyst **Purpose:** Keeps an authenticated user signed in and supports anti-forgery protection and essential session functions. **Duration:** Up to 14 days on a rolling basis, subject to logout, expiration, or session invalidation. **Scope:** Host-only, path `/`. **Security:** HttpOnly; SameSite=Lax; Secure in production. This cookie is strictly necessary to provide account login, security, and requested application functions. Because it is essential, the Services do not provide an option to disable it while remaining signed in. You may block or delete it through browser settings, but authenticated features may stop working and you may need to sign in again. ## 3. Browser Session Storage **Name:** `wc:pending-scroll` **Type:** `sessionStorage` **Purpose:** Temporarily restores page position after certain form submissions. **Duration:** One navigation cycle; it is read and removed. **Transmission:** It remains in the browser and is not sent to Workforce Catalyst as a cookie. ## 4. Google Analytics Cookies Google Analytics may set the following first-party cookies on the Workforce Catalyst domain: **Name:** `_ga` **Provider:** Google Analytics **Purpose:** Distinguishes pseudonymous website visitors for audience and usage measurement. **Default duration:** Two years, unless shortened by our configuration, browser restrictions, deletion, or user choice. **Type:** Optional analytics cookie; accessible to the Google Analytics JavaScript and not used for authentication. **Name:** `_ga_<container-id>` **Provider:** Google Analytics **Purpose:** Maintains session state for the applicable Google Analytics property. The final portion of the cookie name varies by Analytics property. **Default duration:** Two years, unless shortened by our configuration, browser restrictions, deletion, or user choice. **Type:** Optional analytics cookie; accessible to the Google Analytics JavaScript and not used for authentication. Google Analytics may collect or derive page URLs and titles, referring pages, visit times, page views, interactions and events, approximate geographic area, browser and device type, operating system, screen resolution, language, and a pseudonymous client identifier. We do not intentionally send names, email addresses, employee records, survey answers, assessment content, Issue Coach content, meeting notes, uploaded files, or other Customer Personal Data to Google Analytics. Google Search Console helps us monitor public-page indexing and performance in Google Search. Search Console verification does not set a visitor-tracking cookie on Workforce Catalyst pages. ## 5. PostHog Product Analytics Storage Workforce Catalyst uses PostHog for product analytics on pages where PostHog is enabled, including authenticated portions of the Services. PostHog's standard browser persistence may use first-party cookies together with local storage and session storage to maintain an analytics identity and session state across page views and, where persistence is enabled, across browser sessions. **Name:** `ph_<project-token>_posthog` or a similar project-specific PostHog storage key **Provider:** PostHog **Purpose:** Stores limited analytics identity and session information, such as a distinct identifier and session state, so product activity can be associated across page views and sessions. **Type:** First-party analytics cookie and/or browser local storage, depending on the active PostHog configuration. **Duration:** Persistent until cleared, expired, or changed by browser behavior or our PostHog configuration. PostHog may also use session storage for session-related state that ends with the browser session. PostHog may receive or derive an internal account-user identifier, organization identifier and name, membership role, subscription plan or tier, page or route viewed, dates and times of activity, feature interactions, product events, browser and device information, operating system, language, session and device identifiers, and network information used to transmit analytics requests. We do not intentionally send employee profile information, employee survey responses, assessment answers or free-text responses, coach conversations or prompts, meeting notes, scorecard notes, disciplinary or HR content, uploaded-file contents, passwords, payment credentials, or other customer-entered sensitive workplace content to PostHog. Session replay is not currently enabled. PostHog analytics is not required for account authentication or core Workforce Catalyst functionality. ## 6. Stripe-Hosted Pages When you choose checkout or billing management, Workforce Catalyst redirects you to a Stripe-hosted page. Stripe may use its own cookies or similar technologies on its domain for payment, fraud prevention, security, and service operation. Stripe's use is governed by Stripe's privacy and cookie disclosures. Stripe cookies are not set on the Workforce Catalyst domain by the current redirect-only integration. ## 7. Cookie and Browser-Storage Choices You can block or delete cookies and browser storage through browser or device settings. Blocking the essential `wc_session` cookie prevents or disrupts login and authenticated use. Blocking Google Analytics or PostHog analytics storage should not prevent use of the Services, although it may reduce the accuracy and continuity of our website and product measurements. Google provides a Google Analytics opt-out browser add-on at https://tools.google.com/dlpage/gaoptout. You may also use browser extensions or content blockers that prevent requests to analytics providers. Deleting PostHog's project-specific cookie or related browser storage may cause PostHog to treat later activity as a new browser or session. If we later add advertising, remarketing, session replay, cross-site tracking, or other materially different tracking technologies, we will update this Notice and implement consent or other legally required choices before using those technologies where required. ## 8. Do Not Track and Global Privacy Control Workforce Catalyst does not sell or share personal information for cross-context behavioral advertising and does not use advertising or cross-site tracking cookies. Browser Do Not Track and Global Privacy Control signals therefore do not change advertising-cookie behavior because no such advertising cookies are used. We will reevaluate signal handling if our practices change. ## 9. Changes to This Notice We may update this Notice as technologies, providers, or legal requirements change. The platform will display the current version and effective date. ## 10. Contact Workforce Catalyst LLC · 4919 W Stanford St · Springfield, Missouri 65802 · United States Email: dyami.pike@theworkforcecatalyst.com