Privacy

Operators: this describes how the software behaves. Review it with your own counsel and add your contact details and legal entity before running a public deployment.

Browsing without an account

You can search and read every listing without signing up. We record anonymous daily counts of listing views and apply-button clicks (no IP address or identifier is stored with them). Your theme choice and board view are kept in your browser's local storage.

What we store when you sign up

• Account: name, email address, a salted password hash (we never see your password) or your Google account ID if you sign in with Google, and active sessions (with browser user-agent and IP address, so you can recognise and sign out sessions).
• Profile (optional): school, major, graduation year, preferences, home ZIP code, work authorization, time zone. Used only to filter and score listings for you.
• Tracker: applications, statuses, notes, contacts, interviews and reminders you enter.
• Saved items: saved internships, followed companies and saved searches.
• Resumes: files you upload are stored privately on the server, are only downloadable by you, and are never shown to employers.

Cookies

We use one essential session cookie (HttpOnly, Secure in production, SameSite=Lax) to keep you signed in, plus short-lived cookies used during Google sign-in. No advertising or analytics cookies.

Email

We email you for account security (verification, password reset) and for alerts you turn on. Every alert email has a one-click unsubscribe link, and you can change frequency or turn alerts off in Settings → Notifications.

Optional AI resume comparison

Off by default. If you turn it on in Settings → Privacy and click Compare on a listing, the text extracted from the resume you choose and that listing's description are sent to Anthropic's Claude API to generate suggestions. Nothing is sent unless you click Compare. Turning the setting off stops all future requests. Anthropic processes API data under its commercial terms; see their privacy policy.

Employers

Employers see aggregate counts for their own listings (views, clicks, saves, tracks). They never see your identity, profile, resumes or tracker.

Your controls

• Export: Settings → Privacy → Download my data gives you a JSON file of everything tied to your account; your tracker is also exportable as CSV.
• Delete: Settings → Account → Delete account permanently deletes your account, profile, tracker, saved items, alerts and resume files. Moderation records keep an anonymised reference.

Security

Passwords are hashed with scrypt, sign-in is rate-limited, every request for your data is checked against your account, and administrator actions are logged.