Privacy Policy

1. Information We Collect

Most of the Site can be used anonymously. We collect the following:

• Information you submit voluntarily through forms (for example, free-text feedback or a requested job title).
• Anonymous interaction events - such as which job title you selected or which buttons you clicked - keyed to a short-lived random session identifier.
• Limited request metadata automatically attached by network infrastructure: approximate country, coarse device type (mobile or desktop), browser user-agent string, and a salted hash of your IP address used only for abuse prevention. Your raw IP address is not retained in our database.
• Account information (only if you create an account): email address, authentication provider identifier, and login timestamps.
• Consent records: when you accept the Terms of Use, opt in or out of marketing emails, or make an analytics consent choice, we store a timestamp, a salted hash of your IP address, browser user-agent string, policy version, and consent type as evidence required by data-protection law.

Anonymous browsing data is not linked to your identity. Account information is used only for authentication and service delivery.

2. How We Use Information

• To operate, secure, and improve the Site.
• To understand in aggregate which job titles or categories visitors find useful.
• To detect and limit abuse (rate-limiting, spam, automated traffic).
• To respond to feedback or feature requests you submit.
• To send product-update emails if you opted in during signup. You can withdraw this consent at any time; withdrawal does not affect your access to the Site or your account.

We do not use your information for advertising, behavioural profiling, or automated decisions that produce legal effects.

3. Storage and Retention

Information is stored on infrastructure operated by independent service providers selected for their security posture. Anonymous interaction events are retained for up to 24 months for trend analysis and are then deleted or aggregated. Free-text submissions are retained until acted upon or for up to 24 months, whichever is longer.

Account data (email, authentication provider identifier, login timestamps) is retained until you delete your account by contacting us. Consent records are retained for three years after consent is withdrawn, as evidence required by data-protection law.

4. Local Storage & Analytics

This site does not set tracking cookies. Preferences and consent choices are stored in your browser's local storage. When you first visit, an analytics consent notice is shown. You can revisit your preferences at any time by clicking the icon at the bottom-left of any page. The Site honours the browser's “Do Not Track” signal for interaction events.

A short-lived random session identifier is held in sessionStorage to group events from the same visit; it is discarded when you close the tab and is not a persistent identifier.

Analytics categories

Your consent choice is stored in your browser's local storage and in our database alongside a hashed IP address and timestamp as evidence of consent - required by data protection law.

5. Sub-Processors

We rely on a small number of independent service providers to operate the Site. These fall into the following categories:

• Infrastructure, hosting, and edge networking.
• Database and persistent storage.
• Transactional email used only for administrative notifications - never for marketing.
• AI service providers used to generate suggestions in response to a job-title selection.
• Authentication provider used to verify your identity when you create an account or sign in.
• Rate-limiting and abuse-prevention.
• Aggregate, privacy-respecting analytics and performance telemetry.

Each provider receives only the data necessary for its specific function. We do not sell or share your information with advertisers, data brokers, or any party for marketing purposes. A current list of sub-processors is available on request via the contact below.

6. Security

We apply commercially reasonable technical and organisational measures, including encrypted transport (HTTPS), input validation and sanitisation, a strict Content Security Policy, scoped database credentials, and rate limiting on all submission endpoints. No system is perfectly secure, and you submit information at your own risk.

7. Your Choices and Rights

You can:

• Browse the Site anonymously without creating an account.
• Disable JavaScript or use private/incognito browsing to prevent any event collection.
• Enable the “Do Not Track” or “Global Privacy Control” signal in your browser.
• Withdraw marketing-email consent at any time without affecting your access to the Site.
• Request deletion of your account and associated data by contacting us at the address below.
• Contact us to request deletion of any free-text submission you can identify (for example, by approximate timestamp and content).

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction granting equivalent rights, contact us and we will make a reasonable effort to honour applicable rights of access, rectification, and erasure for any data we can attribute to you.

8. International Transfers

Service providers may process data outside your country of residence, including in the United States. By using the Site you consent to such transfers, subject to safeguards required by applicable law.

9. Children

The Site is not directed to children under 16. We do not knowingly collect information from children. If you believe a child has submitted information, contact us and we will delete it.

10. Changes and Contact

We may update this Policy. Material changes will be reflected in the “Last updated” date above. Continued use of the Site after a change indicates acceptance of the updated Policy. For questions or requests, contact us at: hello@topskills.dev