Privacy

JobTrack is built so that the people running it can't read your job search. Your applications are encrypted in your browser before they're saved, and the key never leaves your device.

What we store

• Your username. We never ask for an email, name or phone number.
• Proof of your password, not the password. Your browser turns your password into two separate keys. One proves it's you and is stored only as a one-way hash. The other unlocks your data and is never sent to us.
• Your applications, encrypted. Every application, interview, follow-up, note and setting is encrypted with AES-256 in your browser. We store only the scrambled result.
• A sign-in session for each device you're signed in on, so you don't have to sign in on every visit.

What we can see

Because of the encryption, we can't see company names, roles, salaries, notes or anything else you enter. We can see that your account exists, when it was created, roughly how many records it holds, and when you sign in. Like any website, the hosting provider records IP addresses and request times in its logs. To stop password guessing, we also keep failed sign-in attempts (the username tried and the IP address) for up to a day.

Cookies and tracking

JobTrack sets one cookie: your sign-in session. There are no analytics, advertising or tracking cookies, and no third-party scripts.

Who else is involved

• Vercel hosts the website.
• Neon hosts the database that holds the encrypted records.
• Greenhouse and Lever. When you paste one of their job links, your browser asks them for that job's details directly. They see that request and your IP address; we don't.

None of them can read your applications, because they only ever handle encrypted data.

Keeping and deleting your data

Your data stays until you delete it. Settings → Delete account removes your account, sessions and every record immediately. The database provider may keep encrypted backups for a limited time before they expire. Before deleting, you can export a .jobtrack file from Settings to keep a copy or move it to the Mac or Windows app.

If you forget your password

We can't reset it for you, because we can't unlock your data. The recovery code shown when you signed up is the only way back in. Keep it somewhere safe.

The Mac and Windows apps

The desktop apps don't use an account or a server. Everything stays on your computer, and nothing is sent anywhere except the Greenhouse and Lever lookups described above.

Questions

JobTrack is open source, so you can check all of this in the code. Questions or concerns: open an issue on GitHub.