Privacy Policy

1. Who we are

Jobs Room is operated by its maintainer as data controller. For any privacy question or request, contact info@jobs-room.com.

2. What we collect and why

• Account data (email, password hash): to operate your account — contract, Art. 6(1)(b) GDPR.
• Your content (documents, applications, notes, timelines): to provide the tracking service — contract, Art. 6(1)(b) GDPR.
• Terms acceptance record (timestamp + version): to prove consent — legal obligation / consent, Art. 6(1)(a) and 7(1) GDPR.
• References' contact details (names, emails, phones you provide about others): so you can share them with employers — your legitimate interest, Art. 6(1)(f) GDPR. Only add people who agreed.
• Profile attributes you optionally provide (work status, sector): to segment future statistics — consent, Art. 6(1)(a) GDPR. Skippable at signup, editable in Settings, never exported.

3. Cookies

A single strictly-necessary cookie keeps you signed in: refresh_token (HttpOnly, SameSite=Lax, Secure in production, 14-day lifetime). Because it is strictly necessary for authentication, no consent banner is required for it — this disclosure serves as notice.

4. Analytics

With your consent only, we use Google Analytics to understand aggregate usage and improve the service. It sets _ga cookies, never runs advertising or cross-site tracking, and never sees your documents or application contents. Decline the banner and nothing loads. To change your choice later, clear this site's data in your browser — we will ask again on your next visit. You can also opt out globally with Google's opt-out add-on.

5. Retention

Your data lives as long as your account does. You can delete your account — with all its data — at any time from the Settings page, or by writing to the contact above. Sessions expire automatically after 14 days of inactivity. Backups, if any, age out on the provider's schedule.

6. Your rights

Under the GDPR you may request access, correction, export, or deletion of your data, restrict or object to processing, and withdraw consent. Write to info@jobs-room.com, or delete your content and account yourself on the settings page.

7. Security

Passwords are stored as argon2id hashes (never plaintext); traffic is HTTPS-only; databases and storage are access-controlled. No system is perfectly secure — report suspected issues to the contact above.

8. Children

The service is not directed at children under 16, and we do not knowingly store their data. If you believe otherwise, contact us and we will remove it.

9. Changes

Material changes to this policy are announced in advance and take effect as a new version.