Privacy
Last updated 5 October 2026
The short version. Your CV is read inside your own browser and is never uploaded to us. We store your email address, the search profile derived from your CV, a count of your searches, and the applications you choose to track. If you pay, Stripe handles the card. Measurement cookies are off unless you accept them. We do not sell anything to anyone.
How we see where people get stuck
We record which pages are opened and what is clicked, so we can tell where someone trying to use the site gives up. It covers every visitor, including one who never signs in, because the people who leave are the ones worth learning from.
Nothing is stored on your device to do it. No cookie, no local storage: your browser sends no identifier at all. Visits are grouped by a code worked out on our side from your network address and browser, mixed with a secret that changes every day. That is enough to see that one visit moved from the home page to the app, and useless for recognising you tomorrow, because the same person produces a different code once the day turns. The address itself is never written down, and none of this is linked to your account, your CV or your email. Records are deleted after ninety days.
This is separate from the measurement cookies described further down, which stay off until you accept them.
Your CV never leaves your device
When you upload a CV, the file is opened and read by code running in your browser. The text is used to work out your field, your level and your skills, and then it is discarded when you close the tab. The file itself is never sent to our servers, never written to storage, and never seen by us.
That holds for every feature, not only matching. The Tracker's check against an applicant tracking system reads your CV on your own device and compares it there, so nothing about it is transmitted when you run one.
What we keep is the result: a short profile listing your field, seniority, years of experience, the skill keywords that were found, and the locations you told us you want to work in. That profile is what the matching runs against.
What we store
| Data | Why | Where |
|---|---|---|
| Email address and account identifier | To sign you in and keep your profile attached to you | Firebase Authentication |
| Search profile: field, level, skills, locations | To match you against job postings | Firestore |
| Daily search count | To apply fair use limits and keep the service affordable | Firestore and your browser |
| A cached copy of the day's job postings | So repeat searches are instant and cost nothing | Your browser only |
| Optional preferences you add on your profile page: current location, residency, right to work, nationality or passports held, relocation, notice period, languages, salary floor, LinkedIn address | Right to work and relocation decide which roles you can actually take, so they change your matches. The rest is kept only because you entered it. | Firestore |
| Applications you track: the role, company, link, score and the status you set, from applied through to hired | So you can follow your own search, and so we can measure whether matches lead anywhere | Firestore |
| Plan and billing references: plan, Stripe customer and subscription identifiers, payment date | To give you the plan you paid for | Firestore |
| How you found us, if you accept measurement cookies: the campaign details in the link you arrived on, such as utm_source or a Google Ads click id | To see which channels bring people who find the product useful | Your browser, then your account when you sign up |
Nationality is optional and is never shown to anyone. We do not store your CV, the raw text of your CV, salary expectations you have not given us, your age, your date of birth, your photograph, or any special category data. If you entered an age range in an earlier version of the profile page, saving your profile now clears it.
If you are not signed in and ask for a free preview, the search profile derived from your CV is sent to our server to be scored and is not stored.
Who we share it with
Nobody, for money, ever. We do not sell personal data, we do not rent mailing lists, and we do not pass your profile to recruiters. The only third parties involved are the services that make the product run:
- Google Firebase for authentication, database and hosting.
- Google reCAPTCHA Enterprise, through Firebase App Check, to stop automated abuse. It sees your IP address and browser signals, as described in Google's own privacy policy.
- Stripe, if you buy a plan. Stripe collects and processes your card details and billing information under its own privacy policy. We never see or store your card number.
- Google Analytics and Google Ads, only if you accept measurement cookies. See below.
- YouTube, when you play a video embedded on our pages. YouTube may set its own cookies once you press play.
When you click a job, you leave for the employer's own site or the job board that listed it. What happens there is governed by their privacy policy, not ours.
Where the job data comes from
Job postings are collected from public APIs and from the job board endpoints that applicant tracking systems publish for exactly this purpose: Remote OK, Remotive, Jobicy, Arbeitnow, Adzuna, Careerjet, Greenhouse, Lever, Ashby, Workable, SmartRecruiters, Recruitee and Teamtailor. We do not scrape consumer job boards. Job postings are public listings and contain no personal data about you.
Cookies and local storage
Essential storage is always on: browser local storage keeps you signed in, remembers your cookie choice, and caches the day's job postings so that searching again does not cost a fresh database read.
Measurement cookies are optional. We use Google Analytics to see how the site is used and Google Ads to measure which ads lead to sign ups and purchases. They run in Google Consent Mode: until you press Accept on the cookie banner, no analytics or advertising cookies are set and Google receives only cookieless signals (for example that a page was viewed), which it uses for aggregated measurement. If you accept, these cookies are set and the campaign details described above are saved. To change your mind, clear this site's data in your browser and the banner returns.
Your rights
You can see everything we hold about you inside the app: it is your profile, and you can change it at any time by editing your search. You can delete your account yourself from your profile page: it cancels any subscription and removes your profile, tracked applications and review immediately. You can also email hello@kodefoundry.com from the address you signed up with and we will do it for you, normally within seven days. Stripe keeps payment records for as long as tax law requires.
If you are in the UK, the EU, or another region with equivalent law, you also have the right to a copy of your data, to correct it, to restrict how it is used, and to complain to your data protection authority.
Retention
Your profile is kept while your account exists. Job postings are removed from our database forty five days after we last saw them, because a posting nobody has seen in six weeks is not a live job. Delete your account and your profile goes with it.
Children
This service is for people looking for work and is not directed at anyone under 16. We do not knowingly collect data from children.
Changes
If this policy changes in a way that affects you, the date at the top changes and we will say what changed. Continuing to use the service after a change means you accept it.
Contact
Kode Foundry, hello@kodefoundry.com.