What we do with your data

Browsing the board stores nothing. No account, no analytics, no advertising cookies. You can read every role without us knowing you were here.

Creating an account stores your email address, your name if you give one, and — if you sign in with Google — the name and email Google passes us. We never receive your Google password, and we ask Google for nothing else about you.

Applyingstores what you typed: your name, email, the links you gave, your answer to the role’s question, and the CV file if you attached one. We also record which role it was and when it arrived.

• The reviewer for that role — a named person, shown on the job page before you apply. They read the whole application.
• The hiring company, but only if the reviewer shortlists you. If they do not, the company never sees your application and never learns that you applied.
• Us, to run the service and to answer you.

We do not sell your data, we do not pass it to recruiters, and we do not add you to a marketing list. If we ever want to email you about anything other than an application you sent, we will ask first.

We are a small operation using ordinary tools, and it is more useful to name them than to say “trusted third parties”:

• Firebase Authentication (Google LLC, United States) holds your sign-in — an email address and an identifier. Not your application.
• Google Sheets (Google LLC) holds the applications, in a private spreadsheet only our team can open.
• Google Drive (Google LLC) holds uploaded CVs, in a private folder shared with the same team. A CV is never given a public link.
• Gmail (Google LLC) sends the notification to us and the confirmation to you.
• Hostinger hosts the website, which is static files and holds none of your data.

So your data is processed in the United States. If you are in the UK or EU, that transfer relies on Google’s standard contractual clauses.

• Applications: 12 months from when you send them, unless you ask us to delete them sooner. Long enough that a reviewer can point a later role at someone they already rated; not so long that we are sitting on a pile of old CVs.
• CV files: 12 months, alongside the application.
• Your account: until you delete it.
• Deletion requests: within 30 days, usually much faster.

Use delete your account. That removes your sign-in immediately and sends us a request to erase your applications and any CV. You get an email when it is done.

One thing we cannot undo.If a reviewer has already sent a shortlist to a company, that company holds your application and it is theirs. We will tell you which companies so you can ask them directly. Deleting your account does not reach into someone else’s inbox, and we would rather say so than let you assume otherwise.

You can also email privacy@0thlayer.com for a copy of everything we hold about you, to correct something, or to object to how we are using it.

No analytics, no advertising pixels, no third-party trackers. The only things stored in your browser are the ones that make the site work: your sign-in session, a flag recording whether you are signed in so the page does not flicker, and a local note of which roles you have applied to from that browser. None of it is sent anywhere.