Privacy Policy
Job Tracker · effective 8 August 2026 · Bahasa Indonesia
This application stores your list of job applications. That list is often sensitive — the companies you are applying to may be something you would rather your current employer did not know. This page explains what is stored, who can see it, and what is not done with it.
What is stored
From your Google account, when you first sign in:
- Your name and email address
- The address of your profile picture
- Your Google account identifier
- When you signed up, and when you last opened the app
Your Google password never passes through this application. Signing in is handled by Google, and all this app receives is the information above.
And everything you type yourself:
- Applications — company, role, location, salary, links, dates, notes, tags
- Any recruiter contact details you fill in
- Activities, reminders, interview notes, bookmarks, wishlist
- Your app settings
Documents you upload — CVs, cover letters, certificates and other files — are stored in Cloudflare R2 file storage, not on the application server. The bucket is closed: files cannot be opened through an ordinary link, and every download uses a signed link that is valid for five minutes and is only issued after the server has confirmed the file is yours.
Who can see it
Other users cannot see your data. Every request to the server is filtered by your session, and that rule is held in place by automated tests that try to reach another user's data on every route and check that all of them are refused.
The person who runs this app can. It is run single-handedly, and he has access to the database — as the owner of any server does. Your data is not read for any purpose other than operating and fixing the service, and it is never sold or shared.
Cookies
One cookie, named sid, holds a signed session marker. Its only job is to
keep you signed in. It lasts 30 days, cannot be read by JavaScript, and is
not used to track you on any site.
No advertising cookies, no analytics cookies.
Something you should know: an existing session cannot yet be cut off from the server. If you lose your device, the session on it stays valid until the 30 days run out or you sign out on that device. Signing out only ends the session on the device you are using at the time. This is a known limitation and a fix is planned.
Third parties
No analytics service, no trackers, no advertising. The following receive your IP address because your browser loads files from them:
- Google — signing in, and the typeface from Google Fonts
- Flaticon — icons
- Hostinger — where the app and its database run
And two more that hold the contents of your data, not merely your IP address:
- Cloudflare R2 — stores the document files you upload. The contents of your CV are there
- Resend — sends the reminder emails. It receives the destination address and the contents of the reminder, including any company names inside it
Both are used purely to operate this service, not for advertising or analytics.
Your data may sit outside Indonesia. Cloudflare and Resend run their infrastructure in many countries, and your reminder email passes through a server in East Asia. If that matters to you, it is better known before you upload a document than after.
Email from us
This app sends reminder emails and a morning digest. Both can be switched off separately under Settings → Notifications, and every email carries an unsubscribe link in its footer that works without signing in. Stopping the emails does not delete your account or your data.
There are no promotional emails. The only things sent are reminders you created.
Deleting your data
Open Settings → Account & Data → Delete account. Every application, document, reminder and note is removed from the database, and your files are removed from storage. This cannot be undone.
Signing in again afterwards with the same Google account gives you a new, empty account — not your old data.
On the same page there is an Export data button to download everything in your account as a single file, at any time, before deleting it.
Accounts not opened for 24 months are deleted too, after a warning is sent to your email address first. The full terms — including usage limits and what is not guaranteed — are in the Terms of Service.
Changes to this page
If this policy changes, the date at the top changes with it. This app is still growing; new features that change what is stored will be reflected here.
Contact
Write from the email address you sign in with, so the request can be matched to your account.