Privacy Policy

Who we are

swelistings is operated by Frontend Core LLC, which is the data controller for the accounts, profiles and applications described below.

Write to privacy@swelistings.com with anything in this policy.

What we collect

Everything below is either something you typed or something the service needs to function. There is no third category.

• Account: your name, your email address, whether that address has been verified, which side of the board you chose, and when the account was created and last changed.
• Sign-in: we email a one-time link rather than storing a password. The token behind that link is held until it is used or expires.
• Session: a cookie holding a session token, plus the IP address and browser user-agent recorded against that session.
• Candidate profile, all of it optional: headline, bio, location, years of experience, links you paste to a resume, GitHub, LinkedIn or a personal site, your skills, and whether you are open to work.
• Applications: the resume link, portfolio link and note as they stood the moment you pressed send, plus the status the employer gives them. They are copied at that moment so that editing your profile later cannot rewrite what an employer already received.
• Saved roles: which listings you have shortlisted.
• Employer accounts: your company's name, tagline, description, website, location, headcount and logo, and the roles you post.
• Payments: the id of the Stripe Checkout session that paid for a listing, stored against that listing.

What we do not collect

• Resume files. The profile takes a link and we never hold the document itself.
• Card numbers. Stripe takes payment on its own pages and we never see them.
• Advertising identifiers, or anything that follows you to other sites.
• Information about you from anywhere other than you. We do collect job listings from companies' public career pages, but those describe roles, not candidates.

Why we use it

• To run your account and sign you in.
• To show an employer the applications sent to their own roles.
• To take the fee for a job posting.
• To send the email the service depends on: sign-in links, and a notice to an employer when someone applies.
• To keep the board working: fixing errors, and preventing abuse.

Our legal bases, if you are in the UK or EEA

• Performance of a contract: your account, your profile, your applications, and an employer's listings.
• Legitimate interests: keeping the service secure and working, understanding in aggregate how it is used, and preventing abuse.
• Consent: analytics, where consent is required. You can withdraw it.
• Legal obligation: keeping records of payments.

Who can see what

Applying is the consent. An employer sees the applications sent to their own roles, and the headline and location of the people who sent them. They see nothing about anyone who did not apply to them.

Other candidates see nothing of yours. Your shortlist is yours alone: not even the employer whose role you saved can see that you saved it.

This is enforced by the database itself through row-level security, not only by the code above it.

Companies that process data for us

• Vercel, which hosts and serves the site.
• Neon, which runs the Postgres database holding everything described above.
• Resend, which delivers sign-in links and application notifications.
• Stripe, which takes payment for job postings.
• Cloudflare R2, which stores company logos. They are the only files we host.
• PostHog, for product analytics, sent through our own domain rather than directly from your browser to theirs.

Cookies and analytics

Signing in sets a session cookie, and it is required: without it there is no way for a page to know who you are. Your theme and language choices are stored the same way.

Where analytics is enabled we use PostHog to record page views, interactions and errors, proxied through a path on our own domain. There are no advertising cookies and nothing goes to an ad network.

Listings collected from other sites

Some roles on the board come from a company's own public job-board API rather than from an employer with an account here. They are labelled, and applying happens on that company's site rather than ours.

That process collects nothing about candidates. A company that wants its listings removed can write to privacy@swelistings.com.

How long we keep it

• Account, profile and shortlist: while your account exists.
• Applications: kept after you withdraw one, because withdrawal is a status the employer can see rather than a deletion. An application that vanished from their list would serve neither side.
• Sign-in tokens: until used or expired.
• Payment records: as long as tax and accounting rules require.

Your rights

Wherever you are, you can ask to see what we hold about you, to correct it, or to have it deleted. Write to privacy@swelistings.com and we will answer within a month.

• In the UK and EEA: access, rectification, erasure, restriction of processing, portability, objection, and withdrawal of consent. You can also complain to your local supervisory authority.
• In California: the right to know what we collect and why, to have it deleted, to have it corrected, and to opt out of sale or sharing. We do not sell or share personal information and we run no financial-incentive programmes. You may use an authorised agent.
• We will not treat you differently for exercising any of this.

Where your data is

Frontend Core LLC is in Texas, in the United States, and the services listed above process data there. Where a transfer out of the UK or EEA needs a safeguard, standard contractual clauses cover it.

Children

The board exists for people looking for professional engineering work. It is not intended for anyone under 16, and we do not knowingly collect their data.

Changes to this policy

The date at the top changes whenever this document does. If a change affects you materially, we will email you rather than leave you to notice.

Contact

privacy@swelistings.com.