Privacy Policy - SWE Job Lists

Analytics

The site uses Google Analytics to count visits. When a page loads, Google's script records the page you viewed and when, your browser and device type, the site that sent you here, and a rough location derived from your IP address, which Google truncates before storing. It sets first-party cookies (_ga and _ga_…) so returning visitors aren't counted as new ones; they last up to two years.

Google processes this data under Google's privacy policy. What Google does with data from sites like this one is described at policies.google.com/technologies/partner-sites.

Job clicks

Clicking a listing adds one to that job's click counter. Nothing about you is stored with it. To keep bots from inflating the counts, clicks are checked with Google reCAPTCHA, which is also covered by Google's privacy policy and terms.

Saved filters

When you change the Source filter, your choice is saved in a first-party cookie (sources) so it's still set on your next visit. It holds only the source names, lasts a year, and deleting it just brings back the default selection.

Signing in with Google

Signing in is optional; browsing, clicks and CSV downloads work without an account. If you sign in, Google tells us your Google account ID, your name, your profile photo link and your email address (stored only if Google has verified it). We also record when you created the account and when you last signed in. We never see your Google password and get no access to your Gmail, Drive or other Google data.

We store the address (URL) of your Google profile picture, refreshed each time you sign in, only to show your avatar; the picture itself stays on Google's servers. The URL is deleted with your account and is not kept in the archived copy.

Signing in with email

You can also sign in with a 6-digit code we email you (sent through Resend). We store your email address once you enter the code, and keep each code only as a keyed hash, never the code itself, deleted within 24 hours. While you enter the code, the address sits in your own session cookie. If you sign in with email to an address that already belongs to a Google sign-in here, you get that same account; signing in with Google on an address you first used by email links the two.

Session cookie

Starting sign-in sets a first-party cookie (session). It is signed so it can't be altered, isn't readable by scripts, holds only your account number and a security token that protects forms against cross-site requests, and lasts 30 days or until you sign out. Visitors who never sign in don't get it.

Your resume and preferences

When you upload a resume (PDF or Word), the text is read from the file in memory and the file itself is discarded right away; it is never saved. We store only the text, the file's name, its length and the upload date. Pasted text is stored the same way. Your preferences (role types, locations, remote, graduation date and, if you choose to give it, your work authorization) are stored with your account.

We remove email addresses and phone numbers from the stored resume text (they are replaced by “[email]” and “[phone]” before anything is saved or scored); links such as your GitHub stay, because they help scoring. Files with scripts, macros or links to outside files are refused.

Once per resume version we also ask the scoring model to read your resume on its own and describe it with numbers only (likely role family, level, years of experience, education, the skills it saw). We use that to suggest preferences while you set up your profile (you confirm or change everything) and as extra facts for your match scores. You can untick skills it got wrong. It never infers a school's prestige, and it never sets your work authorization. It is stored with your resume and deleted with it.

To compute match scores, your resume text and preferences are sent, together with a job's description, to OpenRouter, which passes them to TypeSafe's scoring model. They are sent only for that purpose. We don't sell them, share them with employers or use them for advertising.

Match-score and resume-profile inputs and results (your resume text and preferences, the job, and the model's numeric answers) may be retained for up to 3650 days to improve scoring, for example to build and test our own scoring model. They are never shown to anyone, are used only for that, and are deleted with your account.

Emails

Account emails are about things you did: a welcome message when you sign up, a confirmation when you delete your account, and an acknowledgement when you send feedback. We may also send occasional product updates and tips (marketing emails). You can turn those off at any time on the account page or with the one-click unsubscribe link in every one of them; account emails are not affected. We record when you turn them off. Emails are delivered by Resend, which receives your address and the message. We keep a delivery log for 90 days holding a one-way hash of the address, the kind of email and whether it was sent; never the address or the message itself.

Payments

If you buy a paid plan, the payment is handled by Stripe: your card details, billing address and payment history are entered on and kept by Stripe, never on this site. We store only your Stripe customer id, your subscription id and its state (plan, status, renewal date), so we know which plan you are on. When you delete your account those ids are deleted with it and an active plan is cancelled; Stripe keeps its own payment records as the law requires (see its privacy policy).

Feedback

Feedback you send through the feedback form is stored with its type, your message, the page you sent it from and a link to your account, and is emailed to the site's admins so they can reply. If you delete your account, the feedback is kept without the link to your account (only the one-way hash described below remains, which also limits submissions to 5 a day). Ask us to delete it any time.

Retention and deleting your account

Your account, resume text, preferences and match scores are kept while you use the site.
You can replace your resume or delete your account at any time from the account page. Deleting removes the live account immediately: your account, resume, preferences and scores are gone from the site and you are signed out.
An archived copy of a deleted account (name, email, Google account id, preferences, resume text, sign-up and last-visit dates, your marketing-email choice, a summary of your match scores and your answers to the optional questions on the delete form, if any) is kept for up to 90 days to prevent abuse and so we can restore the account, then purged automatically. If you sign in again within the retention window your account is restored automatically (preferences and resume; match scores are recomputed). To have it purged sooner, email people@swejoblists.com from the address on the account.
Accounts not used for 12 months (no visit while signed in) are deleted automatically, the same way.
Match scores for a job are deleted when the job is removed from the site (after about 30 days).
To enforce daily scoring limits we keep a usage log: a one-way, salted hash of your Google account id, the time, cost and job of each scoring request, and when your resume or preferences changed. It holds no name, email or resume text. When you delete your account the entries are cut down to the hash, times and costs and deleted after 48 hours (so deleting and signing up again doesn't reset the limits); otherwise they are kept for 90 days.

Opting out

Install Google's Analytics opt-out add-on.
Or block googletagmanager.com with a content blocker.
Or clear your cookies whenever you like.

The site works exactly the same either way.

Contact

Questions about any of this: people@swejoblists.com. Using the site is also covered by the Terms of Service.