Back to search

Privacy

Information under Articles 13 and 14 of the GDPR. Everything below describes what the running code actually does.

The short version

There is no account and no tracking. The site never learns your name, and it never stores your IP address. What it keeps is the structured filters your search was turned into, a one-way hash of your IP, and which listings were opened, so that usage limits work and coverage gaps can be found and fixed.

The one thing worth knowing: the words you type are sent to a language model provider to be turned into filters. Please describe a job, not yourself.

Who is responsible

Chetan Basuray
Otto Hahn Str 2
85540, Haar
Bayern
Deutschland

There is no data protection officer. A site of this size is not required to appoint one, and saying otherwise would be untrue.

There is no account

You cannot sign up and there is nothing to sign in to. No name, email address, CV, photograph or profile is ever requested or stored. Nothing you do here is linked to an identity, because there is no identity to link it to.

What is recorded when you search

The filters, not your sentence. Every search records what your words were understood to mean, such as the job titles, skills, country and salary floor. Your original wording is not stored with it.

Not your right to work. If you are asked whether you can work somewhere, or whether you would need a visa, that answer is used to rank the results you are looking at and is removed before anything is written down. It is not in the search record, not in the record of searches we could not serve, and it is never asked for your nationality.

What kind of client you used. One word from a fixed list, such as browser, claude or search-crawler. The full browser identification string is not stored, because that can be used to recognise a device; a word from a list cannot. It exists so we can tell whether AI assistants use the public API, and what they ask it for.

A one-way hash of your IP address. Your IP address is never written down. It is combined with a secret and put through SHA-256, and only a short piece of the result is kept. It counts your searches against a daily limit and records that a click happened. It cannot be turned back into an address.

Which listings were opened. When you open a job, the listing, its source and the time are recorded before you are forwarded to the original posting.

How the search performed. How long it took, how many results came back, and whether anything failed.

Your wording, in two specific cases. If a search cannot be served well, the text is kept so the missing coverage can be found and added. If you press Share, the text and filters are stored behind the link you get, because that is what the link replays. Nothing else keeps what you typed.

Cookies and browser storage

This site sets no cookies at all, which is why you have never seen a cookie banner here. Page views are counted, without cookies and without anything that identifies you or follows you between sites. There is no advertising.

One value is stored in your browser: whether you chose the light or dark theme. It stays on your device, is never sent anywhere, and clearing your browser data removes it.

Who else processes a search

Vercel hosts the site and Neon stores the database. Both see the data described above in the course of running it.

OpenRouter, and through it the model provider it selects, receives the words you type in order to turn them into filters. This is the only place your typed text leaves this site. It is also why the request above matters: describe the job, not yourself.

GoatCounter counts page views. It stores aggregate counts only, with no IP address and no browser identifier, and it sets no cookies, which is why there is still no banner on this site. In its own words it is essentially impossible to identify any person from its data, even with full access to it.

Sentry receives error reports, with the sending of personal data switched off. Langfuse receives model traces, with prompt contents redacted rather than transmitted.

These providers operate in part outside the European Economic Area. Where that is the case, transfers rely on the European Commission's standard contractual clauses or an adequacy decision, as set out in each provider's own terms.

Why this is allowed

The processing above rests on legitimate interests under Article 6(1)(f) of the GDPR: running a free job search, keeping it working and free from abuse, and finding out which searches it serves badly so they can be improved.

The interest is balanced deliberately. There is no account, your IP is hashed rather than stored, your wording is discarded except in the two cases named above, and none of it is used to profile you or shown to anyone else.

How long it is kept

Cached results are deleted automatically six hours after they are created.

Daily usage counts are deleted after 7 days. They are meaningless once the day they bound has passed.

Search records are deleted after 30 days.

Click records keep which listing was opened, but the hashed IP is removed from them after 90 days. What remains is a count of how often a listing was opened, with nothing in it that relates to a person.

Searches that could not be served, which are the only records holding your wording, are deleted 180 days after they were last asked.

Shared searches are deleted 180 days after the last time the link was opened, so a link in use is never withdrawn from under you. Ask for one to be removed sooner and it will be.

These periods are enforced by a job that runs with every ingest, not by hand.

Your rights

Under the GDPR you may request access to your data, correction, erasure, restriction of processing, portability, and you may object to processing based on legitimate interests. You may also complain to a supervisory authority in the country where you live or work.

One honest limit: with no account and only a hashed IP, there is normally no way to connect any record to you. Under Article 11 of the GDPR, where the controller cannot identify a person, the rights of access, correction and erasure do not apply unless you supply information that makes identification possible. In practice that means these records usually cannot be found and handed over, because nothing marks them as yours.

A shared link is the exception. It is a specific record and can be deleted on request if you send the link.

Links to other sites

Every result links to a job posting on someone else's site. Once you follow that link, their privacy policy applies and this one does not. Whether they set cookies or track you is their decision, not one this site can make or see.

Changes

If what the site does changes, this page changes with it. It describes the code as it runs today, not an intention.

Contact

Questions, or a request about your data, to itischetanhere@gmail.com.

This page is a good-faith draft prepared by the operator and has not yet been reviewed by a lawyer. It is not legal advice.