Security

The site is served over HTTPS. Our database holds your account record and sessions (tokens and sign-in codes only as hashes) and your resumes. Resume content, including your master resume, its earlier versions and attached postings, is encrypted in our database with a key held outside it; titles, company and job names, posting addresses, scores, dates and counts are not. Your jobs, tracker, contacts and stories stay in your browser, which is only as safe as your device: on a shared computer, sign out and use Clear my data before you leave. Clear my data removes your resumes and other studio records on the server and in every open tab of this browser at once.

The Privacy Policy describes what we hold, where it goes and how long we keep it.

If you find a security problem in this site, email privacy@getthatrole.com with the address or page affected and the steps that show it. We send a first response to every report within five business days. Our contact details are also published at /.well-known/security.txt.