Privacy policy

0th Layer operates 0thlayer.com. For questions about this policy or about your data, email privacy@0thlayer.com.

To be completed before launch: registered legal entity name, company number, registered address, and — if the UK is the place of establishment — ICO registration number. Left blank rather than guessed, because naming the wrong data controller would make the rest of this document unenforceable.

• Account data: email address, and display name if you provide one. If you sign in with Google, we receive your name, email address and Google account identifier. We never receive your password.
• Application data:your name, email address, links you submit, your written answer to the role’s question, and any CV file you attach.
• Technical data: standard web server logs kept by our host. We run no analytics and set no advertising cookies.

• Performance of a contract — processing your application is the service you asked us to perform.
• Legitimate interests — running and securing the service, preventing spam and abuse, and keeping a record of applications so a reviewer can consider you for a later role. You can object to this at any time.
• Consent — for anything optional, such as attaching a CV. Withdrawable at any time.

Your application is read by the named reviewer for that role. It is shared with the hiring company only if that reviewer shortlists you. If they do not, the company never sees it.

Our processors are Google LLC (Firebase Authentication, Google Sheets, Google Drive and Gmail) and Hostinger (website hosting). We do not sell personal data, and we do not share it with recruiters or advertisers.

Our processors are based in, or transfer data to, the United States. Those transfers rely on the standard contractual clauses in Google’s data processing terms.

Applications and any attached CV: 12 months from submission. Account data: until you delete your account. Erasure requests are completed within 30 days. The detail is in what we do with your data.

If you are in the UK or the EEA you have the right to access, correct, delete, restrict or object to our processing of your personal data, and to receive it in a portable format. Exercise any of these by emailing privacy@0thlayer.com, or delete your account directly at account deletion.

You also have the right to complain to a supervisory authority — in the UK, the Information Commissioner’s Office. We would rather you told us first, but it is your right either way.

Applications are held in private Google Workspace storage accessible only to our team. Uploaded CVs are never given a public link. Authentication is handled by Firebase; we never see your password.

No service can promise perfect security and we are not going to. If there is a breach affecting your data, we will tell you and the relevant regulator within the time the law requires.

This is a job board for professional roles and is not intended for anyone under 16. We do not knowingly collect their data; if we learn we have, we delete it.

If we change this policy we update the date at the top. For anything that materially changes what we do with data you have already given us, we will email you.