Privacy policy

What we collect

Account data. When you register we store your name, email, phone, city and role category. Candidates can add a headline, skills, experience, a summary, preferences and a CV file. Employers add company registration details and a business website.

Activity data. Job postings, applications (including screening answers), messages between the two parties on an application, interview schedules, saved jobs and saved searches, and notifications.

Operational data. Session cookies, page view counts on listings, rate-limit counters per IP address, and an admin audit log of moderation decisions.

Who can see what

Public listings show the role details, the employer's company name, city, category, pay range and registration reference — never the employer's account email or phone.

Employers see the application message, answers, profile headline, skills, experience and CV of their own applicants only. Candidates who choose "hide my contact details" stay masked until the employer moves the application past "submitted".

Employer-private data — internal notes, tags, talent-pool membership and interview feedback — is never returned to candidates or shown publicly.

Moderators can review listings, employers, reports and the audit log. Every moderation action records the acting admin's username.

Cookies

We set exactly the cookies the service needs: trab_session (signed-in account, 30 days, HttpOnly, SameSite=Lax, Secure on HTTPS) and trab_admin (moderator board, 8 hours). There are no advertising or third-party tracking cookies.

What we do not do

We do not sell your data, run third-party ad trackers, or share your profile with employers you did not apply to. Passwords are stored as salted scrypt hashes; session tokens are stored only as SHA-256 hashes, so a database read alone cannot replay them.

Retention and your controls

You can export everything we hold about you in one JSON file from your account ("Download my data"). Deleting your account removes your identity, revokes your sessions, closes live employer listings and anonymizes applications. Password resets revoke all sessions; password changes revoke every other session.

Listings that close or expire stop being publicly listed. Moderation and audit records are kept for service integrity.

Contact

Questions or a data request? Use the contact channel shown on your account page, or reply to any transactional email we sent you.