Privacy Policy

Job Tracker is an independent application that helps you track job applications. For any privacy-related queries, contact us at babhairsalim33@gmail.com.

As a small-scale operator not engaged in large-scale systematic processing of special category data, we are not required to appoint a Data Protection Officer under UK GDPR Article 37.

• Account data: email address, display name (optional)
• Application data: job applications you create — company, role, status, notes, dates, salary
• Preferences: default view (board or table), colour theme
• Technical data: authentication session tokens stored in HTTP-only cookies

We do not collect IP addresses, device fingerprints, behavioural analytics, or any special category data.

• Providing and operating the Job Tracker service
• Authenticating your account and maintaining a secure session
• Storing your application records so you can access them across devices
• Applying your preferences (theme, default view)

Legal basis: Contract performance (UK GDPR Art. 6(1)(b)) — processing is necessary to deliver the service you signed up for. We have no other legal basis and do not use your data for marketing or profiling.

Your data is retained for as long as your account is active. When you delete your account via Settings → Danger Zone, all personal data — your profile, email address, and all job applications — is permanently and immediately deleted from our database.

Supabase (our database provider) may retain infrastructure-level transaction logs for up to 30 days for operational integrity. These logs do not contain your application data.

All data is stored in Supabase (PostgreSQL) hosted within the EU. Security measures include:

• Encryption at rest (AES-256) and in transit (TLS 1.2+)
• Row-level security (RLS) policies so each user can only access their own records
• Authentication via JWT tokens delivered in HTTP-only, Secure, SameSite cookies
• No plaintext passwords stored — Supabase uses bcrypt hashing

We use the following sub-processors:

No data is sold, rented, or shared with advertisers, analytics providers, or any other third party beyond the sub-processors listed above.

• Right of access: export your data as CSV from Settings → Data → Export
• Right to rectification: update your email or display name in Settings → Profile
• Right to erasure ("Right to be Forgotten"): permanently delete your account and all associated data in Settings → Danger Zone → Delete account
• Right to data portability: download your application data as CSV from Settings → Data
• Right to object or restrict processing: contact us at babhairsalim33@gmail.com

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) ↗, the UK supervisory authority for data protection.

We use only strictly necessary cookies for authentication. See our Cookie Policy for a full list of cookies, their purposes, and how to control them.

If we make material changes to this policy, we will update the "last updated" date above. Continued use of the service after changes constitutes acceptance.

For any privacy questions, data requests, or to exercise your rights: babhairsalim33@gmail.com