Privacy

Last updated 15 October 2026.

In short

You can search and read jobs without an account. We do not use advertising trackers.
We do not sell personal data, and we do not share it for advertising. You can stop our usage statistics counting your visits by switching them off on the Account page, or by turning on Global Privacy Control or Do Not Track.
An account stores what you choose to save: searches and alerts, and, with sync on, your tracker and resumes. Your application tracker is kept in this browser or in our app, and reaches your account only if you turn on sync. You can delete it yourself at any time.
A resume check runs on your device. A resume you save is kept in your browser or in our app, and reaches our servers only if you turn on sync; there it is stored encrypted.

Who we are

workfinds.app is run by kevinesg.dev, an independent developer based in Quezon City, Philippines ("we"). We decide how the personal data described here is used, and are its controller. For anything about your data, write to support@workfinds.app.

When you visit without an account

Server logs

Our web server and our network provider (Cloudflare) record each request: your IP address, the page requested, the response status and time, your browser's user agent, and the country Cloudflare derives from your IP address. Our own log keeps the page's address without any search words in it. We use these logs to keep the site running and to investigate abuse. Access logs are normally kept for about two days; rotated log files are deleted after 14 days at most.

Usage statistics

We count how the site is used with our own, self-hosted tools. They set no cookies and do not follow you from one day to the next:

page views: the page's address without its search terms or other parameters, except the campaign tags of a link that brought you, from a fixed list; its title; the website you came from (its address, not the page); your browser, operating system, device type, screen size and language; how quickly the page loaded; on job pages, how far down you scrolled; roughly how long you stayed; and the country, region and city your IP address points to. The IP address itself is not kept;
searches: the filters used and any changes to them or to the sort order, whether you searched again within a minute, the number of results, which page of results, whether you were signed in, and the text typed. The text is erased after 90 days;
job and company pages you view, and clicks through to an employer's application page or to another website: the kind of job (its applicant system, country scope and work arrangement, and whether a salary was shown), where it sat in the results and how you reached the page (a search, a company page, a country page or directly); for a company page, whether it has a profile and roughly how many open jobs; for other websites, only their address. Our own record of clicks to an application page also notes which job and from which page;
which menu and footer links you use, and switches between the light and dark theme;
errors the site ran into: the kind of page and the type of error, never the error message;
that a share button was used;
account steps, counted by kind and day only: that a sign-in was started or finished and how (Google, Apple, Microsoft or an email link), and that a search was saved, a company followed, a job added to your tracker, a tracked job's status changed, a resume saved or the autofill extension present in your browser that day; and, if you tell us why you cancel a plan, the reason you pick from a list, with the plan and roughly how long you had it; never which search, company or job, and never your account. We also count how many accounts come back each week, grouped by the week they joined; your account keeps only the last week it was counted;

If you type a comment when you cancel a plan, we keep it with the reason you picked, without your account, for 6 months, then delete it. We record only the week it arrived, and we remove anything in it that looks like an email address, a link or a long number. Please do not put personal details in it. Because nothing links a comment to you, we cannot find yours later; if you want one removed, write to us with its wording and we will delete it.

resume checks: the file type and a rough page count, never the file or its text;
the paid plan: when its page, an upgrade prompt or the offer of our apps was shown or followed, for which feature, and whether the offer's QR code was displayed;
your answer to "Would you use a workfinds mobile app?". If you are signed in, your account also notes that you answered, not what or when, so you are not asked again.

None of these records holds your IP address or an account. Page views, and the searches, clicks, survey answers and paid-plan offers above, share a random-looking number for the day, so that we can count visits and see what a visit led to. It is made from your IP address and browser with a key that changes every day, cannot be turned back into either, and does not link one day's visits to another's. The text you search for, resume checks and account steps never carry it. If your browser sends Global Privacy Control or Do Not Track, none of these records is made for your visit; turning one of them on is how you opt out. Server logs are still kept, for security. Detailed records are kept for 25 months, then only daily totals.

Stored in your browser

your application tracker: the jobs you track with their status, dates, notes and history, your job searches, and the days you opened the site. Clearing this site's data in your browser deletes it, and we cannot restore it unless sync was on;
resumes you save, with the name you give each one. Clearing this site's data in your browser deletes them, and we cannot restore them unless sync was on;
your light or dark theme choice (local storage);
your choice to switch off usage statistics, if you make it on the Account page (local storage);
your last job search, so the list is still there when you go back (session storage);
the scroll position and state of pages you visited, so Back works (session storage);
whether you answered "Would you use a workfinds mobile app?", so you are not asked again (local storage);
your choice to include jobs whose work arrangement is not stated, when you filter by arrangement (local storage);
today's date, so that the autofill extension is counted once a day (session storage);

These stay on your device. We do not read them on our servers, except for what the next section describes.

What your tracker sends us

To show whether a job you track is still open, your browser sends us the ids of those jobs. The request carries no cookie and no account, and we do not keep the ids.

If you turn on job-closed alerts, your browser sends your account the ids of the jobs you are still pursuing, so that we can alert you when one closes. Turning the alerts off deletes that list.

If you make a share link, your browser sends the stage counts of that job search, from which we work out its rates, never company or job names. The link is public and permanent.

When you create an account

Sign-in is handled by our server with Google's Firebase Authentication, using a Google, Apple or Microsoft account or a link sent to your email. With an account from one of those companies, you sign in on its own page, which sees your IP address and browser and learns that you signed in here; it sends us only your email address and an account identifier. If you use a link sent to your email, our server asks Firebase to send it and completes the sign-in. Firebase records your email address, the sign-in method and times; it does not get your IP address from us. If you sign in with Google or Apple using an email address that already has an account, Firebase adds that way to the account and we tell you. With Microsoft, we add it once you have signed in the way you did before. We never receive a password. If you sign in with Apple and choose to hide your email, we receive only the relay address Apple gives us, and our emails to you go through Apple. Your account then holds:

your email address, your time zone, and when the account was created and last used;
if you sign in with Microsoft, a scrambled form of your Microsoft account identifier, so that we recognise you next time;
saved searches and followed companies, with your alert settings;
which jobs matched your alerts and when alert emails were sent (the time and the number of jobs), for 90 days;
with sync on: jobs you track: title, company, link, status, dates, your notes, and the history of status changes;
with sync on: your job searches: the name you give each one, if any, and the day it started;
shared funnels, if you choose to make any: a public link to one job search's figures (stage counts and rates; links made before 15 October 2026 also hold the months they cover; never its name, or company or job names) and its preview image. Anyone with the link can see it, and it follows that search. The link is not deleted with the search or with your account: see "Deleting your account";
with sync on: saved resumes: the name you give each one, its type and size, a fingerprint of the file (to spot duplicates), and the file itself, encrypted before it leaves our server with a key unique to that file;
with sync on: the days you opened the site (the date only), for your activity calendar;
your plan, and how it was granted.

Resumes you save are kept where you save them: in this browser's storage for this site, or in our app's own storage on your phone. They are not sent to us unless you turn on sync. Clearing this site's data, or removing the app, deletes the copies kept there.

Syncing with your account

Your tracker and saved resumes stay in this browser or in our app unless you turn on sync, which is part of Pro and is turned on in each browser or phone. With sync on, they are kept in your account, together with what is already there, as one copy for every browser and phone where sync is on; your notes and resumes are stored encrypted. Your saved searches, followed companies and alerts are always kept with your account, with or without sync. Turning sync off stops that browser or phone syncing; what is in your account stays until you delete it or delete your account. With or without Pro, you can delete it from your account in one step, which also turns sync off in every browser and phone. If your plan ends, nothing is deleted, but changes you make after that are no longer copied to your account. Backups that still contain it expire within 35 days.

Cookies

We set these cookies, and none is readable by scripts:

__Host-auth_flow: only while you sign in, for up to 10 minutes, to protect the sign-in from forgery and, for an email link, to remember the address it was sent to (encrypted);
__Host-auth_link: only when you sign in with Microsoft using an email address that already has an account, for up to 10 minutes, to hold that sign-in until you have signed in the way you did before (encrypted);
__session: keeps you signed in for up to 14 days.

Cloudflare may set a security cookie of its own if it needs to check that a visit is not automated. There are no advertising cookies, so there is no cookie banner.

Email

Job alerts are sent only for searches and companies you turn alerts on for, through Resend, our email provider. Every alert has a one-click unsubscribe link. If an address bounces or reports our mail as spam, we stop sending to it and keep a keyed hash of that address, not the address itself, so that we do not send to it again. Resend keeps its own record of each email it sends for us (the address, the subject and whether it arrived) for a limited time, and its own list of addresses that bounced or reported spam.

Autofill profile

Autofill is not available yet. When it is, it works through our browser extension. The extension keeps your autofill profile and the resumes you give it in its own storage in your browser. They never reach our servers, and we cannot see or recover them; removing the extension deletes them. You can also delete them at any time in the extension's settings. If your paid plan ends, the extension stops filling forms three days later but keeps your profile until you delete it.

The profile can hold your name, email address, phone number, street address, city, region, postal code and country; links such as LinkedIn; whether you may work in a country and whether you need sponsorship; your notice period and salary expectation; your own answers to questions applications often ask; your skills and languages; and, only if you tick the box that says so, your work history and education.

It has no place for your gender, race or ethnicity, religion, sexual orientation, disability, veteran status, date of birth, current or past salary, or government ID numbers, and it refuses saved questions about them. Please do not type such details into the free-text fields either.

The extension fills a form only when you ask, and never submits one. Our site tells it only whether you have a paid plan and until when.

The extension counts the forms it fills per applicant system and passes the counts to workfinds.app for our usage statistics; never what was filled.

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

When you write to us

We keep your email address and your message in our mailbox (Gmail, run by Google), to answer you.

Subscriptions

Paid plans are not available yet. When they are, they will be sold only in our mobile apps, through Apple or Google, who process the payment. We will not receive your card or billing details. A purchase-tracking service (RevenueCat) will tell us that your account has a subscription: the product, its period and status, the store and its country, and the store's transaction number. We send RevenueCat your account identifier, and no email address or name.

Why we use this data, and on what basis

To provide the account features you ask for (saved searches, alerts, tracking, the activity calendar, shared funnels, saved resumes): to perform our agreement with you.
To keep the service secure and working (server logs, request limits), and to understand use without identifying anyone (usage statistics): our legitimate interests.
To prevent abuse of one-time offers and of our mail (the records described under "Deleting your account" and "Email"): our legitimate interests.
To answer you when you write to us: our legitimate interests.
To meet a legal duty, when a law or a court order requires us to keep or hand over data.

We do not use your data for automated decisions about you, and we do not sell it.

Who processes data for us

These companies process data on our behalf, under their own terms:

Cloudflare: network, security, file storage and mail forwarding. Every request (IP address, page, browser); saved resumes and account backups, both encrypted before upload; mail sent to support@workfinds.app, on its way to our mailbox.
OVH: hosting of the web server and databases. Account data and server logs.
Google (Firebase Authentication): sign-in. Email address, sign-in method and times.
Resend: sending alert emails, once they start. Email address, the content of the alert, and delivery records (sent, bounced or reported as spam).
RevenueCat: purchase tracking, once paid plans launch. Account identifier, product, status, the store and its country, and the store’s transaction number. No email address or name.
Google (Gmail): the mailbox that receives support mail. Your email address and what you write to us.

These companies deal with you directly and decide themselves how they use your data:

Apple and Google Play: purchases, once paid plans launch. They take the payment and keep your payment details, under their own privacy policies; we never receive them.
Google, Apple or Microsoft: when you sign in with their account. They see your IP address and browser on their own sign-in page, and learn that you signed in to workfinds.app, under their own privacy policies.

Where your data goes

Our servers are in Singapore. Sign-in data is processed by Google in the United States, alert email is sent by Resend, a company in the United States that keeps its records there, and Cloudflare handles requests on its worldwide network. We run the service from the Philippines. These countries may protect personal data differently from yours. Where the law requires it, we rely on the standard contract terms these companies offer for such transfers.

Other people's data in listings and profiles

Job listings come from public company career pages. Company profiles come from public sources such as the company's own website, which is sometimes read with the help of an automated text service. Neither contains data about you as a visitor. A listing or profile may name a recruiter, contact or founder, as its source does. If one shows your personal data and you want it removed, write to us. The copy we keep of a listing can also contain details from the source that we do not show, such as the name of the person who posted it; we do not use them, and you can ask us to remove them.

How long we keep it

Account data: until you delete your account. A shared funnel link is kept after that as an anonymous copy, unless you ask for it to be removed.
Records of alert emails sent and of the jobs that matched: 90 days.
A job you remove from your tracker: it can be restored for 7 days, then it is deleted.
Inactive accounts: we may delete an account that has not been used for more than two years. We will warn you by email before deleting an inactive account.
Access logs: normally about two days; rotated log files are deleted after 14 days at most.
Search text in usage statistics: 90 days. Other detailed records: 25 months.
Backups of account data: encrypted, and deleted after 35 days.
Subscription records, once paid plans launch: the purchase events the stores send us, for 25 months, also after the account is deleted.
Mail you send us: up to 12 months after our last reply. A record of a data request (its dates and what we did) is kept for 3 years.

Deleting your account

You can delete your account on the account page. For 30 days you can sign in to cancel the deletion. After that we delete your account data and your saved resume files, and we have Google delete your sign-in record, which it completes within 180 days. Backups that still contain your data expire within 35 days. If you cannot sign in, write to support@workfinds.app from the account's email address and we will delete the account for you. A tracker kept in your browser or in our app is not part of your account unless you turned on sync: delete it there, or by clearing this site's data or removing the app. Resumes saved in your browser or in our app are not part of your account unless you turned on sync for them. Synced resumes are deleted with your account. The copies in your browser or on your phone stay until you delete them there, clear this site's data or remove the app.

Shared funnel links stay. If you made one, it keeps showing its last figures after the account is gone, as an anonymous copy: the link, the stage counts and rates (links made before 15 October 2026 also hold the months they cover), and the preview image. Nothing in it says whose it was: no account, email address, name, company or job. To have your links removed with the account, tick "Also remove my shared funnel links" when you delete it. You can also write to us at any time with a link and we will remove it.

A few records are kept after deletion. None of them holds your email address:

if your account used an offer that we give only once, a keyed hash of your email address and sign-in identifier, which only stops the same offer being taken again;
if mail to your address bounced or was reported as spam, a keyed hash of the address, so that we never mail it again;
if you had a subscription, the purchase events the store sent us (the product, dates, the store's transaction number and country, and your former account number) for 25 months, for our accounts and for refund disputes. We delete your record at RevenueCat.

Free trials of paid plans are given by Apple or Google, once per store account, and they keep that record.

Your rights

Wherever you live, you can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to move it elsewhere. Write to support@workfinds.app from your account's email address. We reply within one month, and we never send data to a different address. A copy of your data from us covers what we hold. What is kept in your browser or in our app is already with you.

You can object to our usage statistics by switching them off on the Account page, or by turning on Global Privacy Control or Do Not Track. We do not sell or share personal data, and we will not treat you differently for using your rights.

If you are not satisfied with our answer, tell us at the same address. We confirm within 30 days that we received your complaint, and we review it. You can also complain to the data protection authority of the country where you live.

Children

workfinds.app is for people looking for work. Accounts are for people aged 18 or older, which you confirm when you sign in. We do not check identity documents; if we learn that an account belongs to someone younger, we delete it.

How we protect it

Connections to the site are encrypted. Saved resumes and backups are encrypted before they are stored. Account data sits in a database that cannot be reached from the internet, and only the person who runs workfinds.app can access it.

Changes

If workfinds.app is ever sold or merged, your data moves to the new owner under this policy, and we will tell account holders first.

When this policy changes in a way that matters, we will say so on this page and, if you have an account, by email before the change takes effect. See also our terms of use.