BambooHR

Overview

BambooHR provides embeddable career page infrastructure that organizations deploy on their corporate websites to manage public-facing job listings and candidate intake. The platform renders job boards with search and filtering capabilities, detailed position descriptions, and structured application forms. BambooHR handles the full application lifecycle from job discovery through submission confirmation within the employer's domain context. It is widely adopted by small and mid-size businesses as their primary applicant tracking system (ATS), with over 30,000 organizations relying on it across the US and internationally.

What This Script Does

BambooHR scripts load from subdomains such as app.bamboohr.com and <company>.bamboohr.com, rendering career page components on employer websites either as JavaScript-injected DOM elements or fully embedded iframes. The career site widget is typically loaded via a <script> tag pointing to BambooHR's hosted JavaScript, which bootstraps the job board and communicates with the BambooHR API.

Cookies set:

• Session cookies (first-party, session duration) to maintain application flow state across multi-step forms — preventing data loss when navigating between application steps
• bamboohr-session or equivalent session identifiers scoped to the BambooHR subdomain
• Referral source cookies that record how the candidate arrived at the job listing (direct, LinkedIn, Indeed, etc.) for sourcing analytics

Data collected through application forms:

• Contact information: full name, email address, phone number, mailing address
• Employment history and education records entered into structured form fields
• Work authorization status and demographic information (where required by law)
• Uploaded files: resumes (PDF, DOCX), cover letters, and portfolio documents
• Screening question responses (role-specific questionnaires configured by the employer)

Script behavior:

• Fetches active job listings from the employer's BambooHR account via authenticated API calls
• Renders search and filter UI (by department, location, employment type)
• Validates form fields client-side before transmitting completed applications to BambooHR's servers
• Fires completion events upon successful application submission for employer-side sourcing attribution

Consent & Compliance

BambooHR career page scripts fall under the functional consent category. Under GDPR and the ePrivacy Directive, scripts that power job listing displays and application forms serve a function directly requested by the visiting candidate — the user has navigated to a careers page and initiated a specific interaction. Session cookies required for application state management are generally exempt from consent requirements under ePrivacy Article 5(3) as technically necessary cookies.

Under CCPA/CPRA, the personal information collected through application forms (contact details, employment history, uploaded documents) must be disclosed in the employer's privacy notice. California law requires a separate applicant privacy notice under CPRA for California residents. Employers should ensure their BambooHR integration is covered by an appropriate Data Processing Agreement (DPA) with BambooHR.

BambooHR is a US-based company and relies on Standard Contractual Clauses (SCCs) for international data transfers from the EEA and UK.

Should You Block This Without Consent?

No. BambooHR career page scripts deliver core recruitment functionality that candidates explicitly seek out. Blocking them would prevent visitors from viewing job openings or submitting applications, undermining a service the user has intentionally navigated to use. Session cookies are technically necessary for multi-step application forms and are exempt from consent requirements.