What is stored, and why
Each row is data held about you, the reason it exists, the lawful basis under the GDPR, and how long it stays.
Your email address and a hash of your password
- Why
- To let you sign in and to reach your own workspace. The password itself is never stored: only a PBKDF2-SHA256 hash with a salt unique to you.
- Lawful basis
- Performance of a contract (providing the account you asked for).
- Kept for
- Until you delete your account, which removes it immediately.
The job advertisements you have collected, and your notes on them
- Why
- To keep your shortlist, application status and language corrections between visits. The advertisement text itself is read on the server to decide whether English is enough, and is not sent to your browser or shown here — it belongs to the employer who wrote it. What you see is the job’s facts, our verdict, the requirements we extracted, and a link to the original.
- Lawful basis
- Performance of a contract.
- Kept for
- Until you delete them individually, reset the workspace, or delete your account.
Your search settings: the roles you are looking for, and required or excluded keywords
- Why
- To run searches the way you configured them.
- Lawful basis
- Performance of a contract.
- Kept for
- Until you change or delete them.
The listings your searches have already judged and set aside
- Why
- So a repeated search does not re-read the same dead ends: when a page-fetching source returns a listing that cannot be imported — an unreadable page, an unsafe apply link, or an advertisement in the wrong country, too short to screen, or outside your searched roles — its address and the reason are kept, and later runs skip it without fetching it again.
- Lawful basis
- Performance of a contract.
- Kept for
- Until you reset the workspace or delete your account.
Sign-in records: the email tried, the IP address, and whether it succeeded
- Why
- To detect and slow down password guessing. This is the only place an IP address is stored.
- Lawful basis
- Legitimate interest in keeping accounts secure.
- Kept for
- Automatically deleted after 30 days.
A daily count of visits and distinct visitors
- Why
- To know roughly how much the site is used. See "How visits are counted" below - this is a counter, not a profile.
- Lawful basis
- Legitimate interest in understanding basic usage, with no identification of anyone.
- Kept for
- The daily totals are aggregate and kept indefinitely. The de-duplication markers are deleted when the day ends.