The short version
- We do not use advertising trackers. No Google Analytics, no Meta Pixel, nothing that follows you around other websites.
- Most of what we keep is saved on your own device so the site works, and stays there: staying signed in, remembering dark mode, holding on to the jobs you saved.
- Two outside tools load only if you press “Accept all”. Press “Necessary only” and your browser never contacts them at all.
- If you paste in a CV, its text stays in that one browser tab and is gone when you close it. A copy saved to your account is encrypted, and you can delete it whenever you want.
The rest of this page is the detail. The Privacy Policy covers what happens on our servers rather than in your browser.
Keeping you signed in
These cannot be switched off, because the site does not work without them. You sign in, and something has to remember that you did.
- Staying signed in. Saved in this browser. Until you sign out (the sign-in token inside it lasts an hour and is renewed while you use the site).
- Your answer to the cookie banner. Saved in this browser. Until you change it.
- Plausible told to stop. Saved in this browser. Until you accept again.
- The address waiting for a verification code. Saved in this browser. Until verification completes.
- Staff sign-in, if you are us. This tab only. Until you close the tab.
- Where to send you after you sign in. This tab only. Read once, then removed.
- Where to send you after you confirm your email. Saved in this browser. Read once, then removed; ignored after 24 hours.
The exact names, and how long each one lasts
| Name | What it is for | Where it is kept | How long |
|---|---|---|---|
| sb-* (Supabase Auth) | Keeps you signed in across page loads. | Saved in this browser | Until you sign out (the sign-in token inside it lasts an hour and is renewed while you use the site) |
| jobzyl_cookie_consent | Remembers your cookie preference ("all" or "necessary"), when you made it, and which tools the banner named at the time. If that list changes, the banner asks again. | Saved in this browser | Until you change it |
| plausible_ignore | Written only when you withdraw consent after Plausible has loaded, so it stops counting pages in that tab. Removed if you accept again. | Saved in this browser | Until you accept again |
| jobzyl_pending_verify_email | The email address you just signed up with, so the verification screen knows who is waiting on a code. | Saved in this browser | Until verification completes |
| jobzyl_admin_session | Short-lived admin session token. Only ever set if you sign in at /admin. | This tab only | Until you close the tab |
| jobzyl_auth_next | Where to send you after signing in, for the one route that cannot pass it in the URL. | This tab only | Read once, then removed |
| jobzyl_auth_next_signup | The page you were on when you signed up, so the confirmation link (which opens in a new tab) can bring you back to it instead of the homepage. | Saved in this browser | Read once, then removed; ignored after 24 hours |
About jobzyl_pending_verify_email: Holds an email address. Removed as soon as the address is confirmed.
About jobzyl_admin_session: Listed for completeness. No visitor account can obtain one, and it is never set on any normal page.
About jobzyl_auth_next_signup: A page address on this site, such as a search you had run. Never an email address or anything from your account.
Remembering how you like things
Your settings and your work, kept on your device so a refresh does not throw them away. None of it is sent anywhere to be analysed and none of it is shared. Clearing your browser data removes the lot, and if you have an account the jobs you saved come back from there next time you sign in.
- Light or dark mode. Saved in this browser. Until you change it.
- Jobs you saved and searches you ran. Saved in this browser. Until you delete it or sign out.
- When you last opened your tracker board. Saved in this browser. Until you delete or sign out.
- Which tracker board layout you chose. Saved in this browser. Until you delete it or choose again.
- Which listings you have already opened. Saved in this browser. Until you delete or sign out.
- Your job preferences. Saved in this browser. Until you delete or sign out.
- The job alerts you set up. Saved in this browser. Until you delete or sign out.
- The last set of results you looked at. Saved in this browser. Until the next search.
- Your last search settings. Saved in this browser. Until you delete or sign out.
- That you closed the "Add your CV" prompt. Saved in this browser. Until you clear site data.
- How wide you dragged the job panel. Saved in this browser. Until you change it.
- Tips you have already been shown. Saved in this browser. Until you delete or sign out.
- Whether the staff scrape bar is open, if you are us. Saved in this browser. Until you change it.
- Whether you have a CV on file, for the top bar. Saved in this browser. Until you sign out.
The exact names, and how long each one lasts
| Name | What it is for | Where it is kept | How long |
|---|---|---|---|
| jobzyl_theme | Light / dark / auto preference. | Saved in this browser | Until you change it |
| jobzyl_tracked_v2, jobzyl_tracked_anon_v1, jobzyl_search_history | The jobs you tracked and your recent searches. Until you make an account the tracked list lives only here, on this device, with a note of which jobs you saved while signed out; making one uploads those and keeps the two in step. | Saved in this browser | Until you delete it or sign out |
| jobzyl_board_visit_v1 | Remembers when you last opened the board, so it can ask once whether you applied to jobs you opened since, and which jobs it has already asked about. | Saved in this browser | Until you delete or sign out |
| jobzyl_board_variant_v1 | Remembers whether this browser opens the tracker as the split view (the default) or the classic board, after you choose one. | Saved in this browser | Until you delete it or choose again |
| jobzyl_visited_v1 | Remembers which listings you have already opened, so the results list can dim them and you can see where you got to. | Saved in this browser | Until you delete or sign out |
| jobzyl_profile | Your CV-search preferences: display name, target seniority, target minimum salary, remote preference. | Saved in this browser | Until you delete or sign out |
| jobzyl_alerts | Offline cache of the job alerts you created, so the alerts screen renders before the server responds. | Saved in this browser | Until you delete or sign out |
| jobzyl_jobs_cache, jobzyl_jobs_cache_query, jobzyl_jobs_cache_total | The last page of results and which search produced them, so returning to the tab does not re-run the search. | Saved in this browser | Until the next search |
| jobzyl_days_back, jobzyl_locations, jobzyl_remote_only, jobzyl_page, jobzyl_results_per_query, jobzyl_location_explicit | Your last search settings: date range, locations, remote-only, page, results per keyword, and whether you picked the location yourself. | Saved in this browser | Until you delete or sign out |
| jobzyl_cv_prompt_dismissed | Remembers that you dismissed the prompt above the results asking for a CV, so it does not come back on every search. | Saved in this browser | Until you clear site data |
| jobzyl_pane_width | How wide you dragged the job detail pane. | Saved in this browser | Until you change it |
| jobzyl_hint_board_v1, jobzyl_hint_clicked_v1, jobzyl_hint_track_v1 | Remembers that you have already been shown a one-off tip, so it is not shown again. | Saved in this browser | Until you delete or sign out |
| jobzyl_admin_scrape_bar | Remembers whether the admin scrape status bar is expanded or collapsed. | Saved in this browser | Until you change it |
| jobzyl_nav_hint | Remembers whether your account had a CV the last time you visited, so the top bar can keep the right amount of space for its button while your account loads. | Saved in this browser | Until you sign out |
About jobzyl_board_visit_v1: Stores a short hash of each listing URL rather than the URL itself. Never leaves your browser.
About jobzyl_board_variant_v1: Holds one word, "classic" or "split". Never leaves your browser.
About jobzyl_visited_v1: Stores a short hash of each listing URL rather than the URL itself, so the stored value is not a readable list of the roles you looked at. Never leaves your browser.
About jobzyl_profile: Personal data, and it is the reason this row exists rather than being folded into the preferences row below.
About jobzyl_admin_scrape_bar: Listed for completeness. Only ever set inside /admin, holds the literal string "open" or "closed", and describes a panel rather than a person.
About jobzyl_nav_hint: The single character 1 or 0. Not your CV, not its name, not anything from it. Checked against your account on every visit and corrected if it is wrong.
Your CV
A CV is the most personal thing anybody hands us, so it gets its own section here.
When you paste or upload one, the text is held in the tab you are working in and nowhere else, so the keyword matching can run on your own machine without sending it anywhere. Close the tab and it is gone. Sign out and it is gone. We also keep the match percentages it produced. Those are numbers and job links rather than anything out of the CV itself, but they still say how well you fit particular roles, so they sit here and not with the settings above.
If you save a CV to your account, that copy lives on our servers, encrypted, and you can delete it from your account page at any time without deleting the account.
- How well your CV matched each job. Saved in this browser. Until you delete or sign out.
- Your CV text, in this tab only. This tab only. Until you close the tab.
The exact names, and how long each one lasts
| Name | What it is for | Where it is kept | How long |
|---|---|---|---|
| jobzyl_cv_scores_v1 | Cached CV-to-job match percentages, so reopening a result does not recompute them. | Saved in this browser | Until you delete or sign out |
| jobzyl_resume | Holds your resume text in the current browser tab for keyword match-scoring. Cleared when you close the tab, and on sign-out. | This tab only | Until you close the tab |
About jobzyl_cv_scores_v1: Scores derived from your CV. Numbers and job URLs only - no CV text - but it is a record of how well your CV fits specific roles, so it is bucketed with the CV rather than with the preferences.
About jobzyl_resume: May contain personal data including special-category data per Art 9 GDPR if your CV mentions health, disability, religious beliefs, or similar. The browser is the only place this key is stored - match scoring runs locally. Server-side AI features (cover letters, interview prep, CV tips) use a separate, encrypted CV record kept in our database; see the Privacy Policy.
Only if you say yes
Press Accept all on the banner and your browser loads the tools below. Press Necessary only and it does not contact them at all.
- Plausible. Anonymous, aggregated traffic analytics. No cookies. Runs from inside the EU (plausible.io). No cookies. If you withdraw consent after it has loaded, one flag (plausible_ignore) tells it to stop counting.
- PostHog. Product behaviour analytics (pages viewed, feature usage, funnels). Loaded only after you choose Accept all. If you are signed in, events are linked to your Jobzyl account ID (never your email) so they can be tied to your account. Autocapture and session recording are off. Runs from inside the EU (eu.i.posthog.com). No cookies: persistence pinned to localStorage (lib/posthog.ts). Stores a random ID there, a tab ID in sessionStorage, and an opt-out flag if you withdraw consent.
All of them run inside the EU, and what they collect stays there.
We also store this on your device, only after you press Accept all:
- Which link brought you here. This tab only. Until you close the tab, or until it has been recorded.
- PostHog's random ID for this browser. Saved in this browser. Until you clear this site's data.
- PostHog's ID for this tab. This tab only. Until you close the tab.
The exact names, and how long each one lasts
| Name | What it is for | Where it is kept | How long |
|---|---|---|---|
| jobzyl_acquisition | The campaign tags on the link you arrived from, or the name of the site that sent you, kept in the tab so it can still be recorded if you join by signing in with another account. | This tab only | Until you close the tab, or until it has been recorded |
| ph_*_posthog, __ph_opt_in_out_* | PostHog's random visitor ID, and, if you withdraw consent, the flag that keeps it switched off. Only written after you press Accept all. | Saved in this browser | Until you clear this site's data |
| ph_*_window_id, ph_*_primary_window_exists | Lets PostHog tell one open tab from another. Only written after you press Accept all. | This tab only | Until you close the tab |
About jobzyl_acquisition: Only written after you press Accept all, and removed if you change your mind. It holds a website's name, not the full address of the page you came from.
About ph_*_posthog, __ph_opt_in_out_*: Linked to your Jobzyl account ID if you are signed in, never your email.
If your browser is set to send a Global Privacy Control or Do Not Track signal, we take that as “Necessary only” and do not ask. Nothing optional loads, and the banner tells you why rather than offering an “Accept all” button we would then ignore. Turn the signal off in your browser and the choice comes back.
Who else is involved
We do not use Google Analytics, Meta Pixel, Hotjar, or any advertising or marketing tracker.
These companies are part of running Jobzyl, and none of them puts anything in your browser:
- Our own sign-in server (sb.jobzyl.com) issues the session described at the top of this page. It runs on a machine we rent from Oracle Cloud in Frankfurt and administer ourselves. Oracle supplies the hardware and has no access to what is on it, and no outside company sees your session.
- Amazon Web Services (AWS) hosts the site and the API. No tracking cookies.
- Resend sends our email, from inside the EU.
- Anthropic writes the cover letters and interview prep when those tools are available, in the United States, and only at the moment you ask for one.
- Sentry collects our crash reports, in Germany.
One more, and only if you choose it: Continue with Google on the sign-in page takes you to Google’s own site to sign in. Any cookies there are Google’s, set on Google’s domain under Google’s policy, and none is set on jobzyl.com. Google tells us your email address, name and profile picture so we can create or open your account. Signing in with an email and password involves no one else.
Things we record that are not cookies
Two records are made on our own server while you use the site. They put nothing on your device, so they are not cookies, and they belong here anyway because consent is what you came to this page to control. Consent does not switch them off: they are part of how the feature works. The Privacy Policy has the full detail.
- Outbound apply clicks. Pressing Apply goes via our server, which passes you straight on to the posting and notes which listing and which job board. That is how we catch an apply link that has stopped working, and how we check a board’s own click figures against ours. The record does not contain your IP address.
- Search metadata. What was searched, how long it took and whether it found anything, so we can tell a broken source from an empty one. Your IP address is cut short before it is written down.
Neither is used for advertising and neither is sold. We may send a job board an aggregate count of the clicks we passed to it so it can check that against its own figures, and a total is not a record of who clicked. Both are deleted on the schedule set out in the Privacy Policy. The click record rests on legitimate interest, which means you can object to it under Art 21 GDPR: see the GDPR page.
Changing your mind
Use Manage cookie preferences at the bottom of any page. It reopens the banner, and whatever you pick replaces your old answer straight away.
Choosing Necessary only keeps the optional tools off for good, or until you change it back, and nothing is requested from any of them. It does not stop the two server-side records described above, which are not analytics tools and leave nothing on your device.
To remove everything Jobzyl holds about you, including what is on our servers, use Delete account on your account page. To clear only what is on this device, clear this site’s data in your browser settings.
Clearing the cookie answer by hand
Open your browser’s developer tools, then Application, then Local Storage, then jobzyl.com, and delete the jobzyl_cookie_consent row. Refresh, and the banner comes back. The Manage link does the same job in one click.
Questions
Email privacy@jobzyl.com about anything on this page, or support@jobzyl.com about anything else.