Privacy notice (Datenschutzerklärung)

Information pursuant to Art. 13 GDPR / DSG. Last updated: 2 October 2026.

Controller

D. Pietersen, Bachleiten, 6232 Münster, Austria. [email protected].

What we process, and why

• Browsing without an account: a jb_country cookie with the country you picked (so the list knows where you are); your theme choice is kept in your browser only. Server logs hold IP addresses briefly for security and error analysis. Legal basis: legitimate interest (Art. 6(1)(f)).
• Account: email address, optional name, country, sign-in provider, and a session cookie (jb_session, a random token; only its hash is stored). Legal basis: performance of the contract (Art. 6(1)(b)).
• Your marks: the companies you have hidden, and your named alerts. Legal basis: Art. 6(1)(b).
• Email alerts: we email you only when you enable emails for a saved search and new jobs match. Free accounts can choose one weekly digest; Pro includes daily alerts; every email has an unsubscribe link. Legal basis: Art. 6(1)(b) / consent, which you can withdraw by deleting the alert.

Processors we use

• Railway (Railway Corp., USA): hosting and database. Data may be processed in the USA under the EU Standard Contractual Clauses / Data Privacy Framework. Region: Europe West (Amsterdam, Netherlands).
• Resend (Resend, Inc., USA): sending sign-in links and alert emails.
• Google: only if you choose Google sign-in; Google shares your email and name with us.
• PostHog (PostHog, Inc.): optional product and website analytics. The configured ingestion region is the European Union. See PostHog’s privacy policy.
• DeepSeek: job-posting text (never your personal data) is sent for location classification.

Retention

Account data is kept until you delete your account (Settings → Danger zone). Deletion removes your account, marks and alerts immediately. Sign-in links expire after 15 minutes; sessions after 90 days. Server and deployment logs are held by our hosting provider and deleted automatically under its retention policy - no longer than 30 days.

Aggregate service measurements

Our server maintains daily totals of page loads, broad page types, whether a request has an internal, external or missing referrer, saved analytics choices, consent preference actions, and sign-in outcomes. Known automated traffic is counted separately using the request user-agent. These counters are collected regardless of optional analytics consent. They contain no IP addresses, account or browser identifiers, complete URLs, query strings, raw referrers or raw user-agents. They do not link requests into individual visits. Totals remain in our hosting database for 90 days and are not sent to PostHog. Account creation totals are also calculated from our existing account records.

Your rights

Access, rectification, erasure, restriction, portability and objection (Art. 15–21 GDPR), and the right to withdraw consent at any time. Write to [email protected]. You can also complain to the Austrian Data Protection Authority (Datenschutzbehörde, Barichgasse 40–42, 1030 Wien, dsb.gv.at).

Optional analytics

With your consent, we use PostHog to measure visits, engagement, job browsing, signup steps, use of saved searches, plan selection, checkout steps and purchase confirmations. For consented sign-ins, the server sends a completion event so measurement does not depend on the next page loading. Purchase confirmations include the plan, amount, currency and a random purchase identifier. We process a random browser identifier, an internal account identifier after sign-in, browser and device information, referring website, page types and the specified interaction events. The legal basis is consent (Art. 6(1)(a) GDPR). We do not send names, email addresses, form contents, search text or authentication credentials as analytics properties. Session recording and automatic page-text capture are disabled.

You may allow or decline analytics, and withdraw consent at any time using Change cookie settings on this page. Withdrawal stops further collection and removes the analytics identifiers stored by this site in your browser. It does not automatically delete events already received by PostHog; contact us to exercise your erasure rights. Your preference is saved for 180 days. Analytics identifiers use local storage. The project uses PostHog’s free plan, which provides a one-year event-retention period. You can contact us to request earlier deletion.

Cookies

Necessary cookies: jb_country (your country, 1 year), jb_session (your sign-in, 90 days) and a short-lived sign-in nonce. The dfh_analytics cookie stores your optional analytics choice for 180 days. A signed dfh_auth_event cookie, set only with analytics consent, carries a sign-in result as a delivery fallback for up to five minutes and is removed when read. Optional analytics identifiers are stored in local storage. No advertising cookies.