Privacy Policy

[set OPERATOR_NAME in .env] (“DropJobs”, “we”) runs the DropJobs website, Discord bot and phone notifications. This page explains what personal information we collect, why we collect it, who we share it with, and the choices you have. We keep it to what's needed to send your alerts and run your plan.

What we collect

Account details

• If you sign in with Discord: your Discord user ID, username and display name, and the email address on your Discord account.
• If you sign up with email: your email address, the username you choose, and your password. Passwords are stored only as a salted, one-way hash, never in readable form.

Your alert settings

• ZIP code(s), travel distance, minimum pay, and any state or employment-type filters you set.
• Your plan, when it expires, referral code and referral activity, and whether your alerts are on or paused.

Notifications

• Phone/browser push: if you enable push, your browser gives us a push subscription (a web address and encryption keys for sending to your browser) plus the ZIP you chose.
• Discord DMs: we send alerts from the bot using your Discord ID, and we note whether delivery failed so we can stop retrying a blocked account.
• Alert history: a record of alerts we sent you (job title, location, link and time), used for your stats, leaderboard and weekly summary.

Success stories

If you send us a success story, we may publish the name and text you gave us on the site once it has been approved. Ask us and we'll remove it.

Billing

Payments are handled by Stripe. We store your Stripe customer and subscription identifiers and your plan status. Your card details go directly to Stripe and are never stored by us.

Sessions and cookies

• A sign-in cookie that keeps you logged in for up to 30 days (we store only a hashed version of it).
• A limited sign-in cookie when you open a one-tap link from one of our messages.
• Your browser's local storage for small conveniences, such as remembering that you dismissed a banner.

We don't use advertising cookies or third-party analytics trackers on our pages.

Support messages

If you use the form on the Support page we store your name (if you give one), your email, your message and the page you sent it from, so we can answer you. We keep it for as long as we need to handle your request, and you can ask us to delete it.

Sign-in codes by email

If you choose "Email me a sign-in code", we store a scrambled copy of the 6-digit code for ten minutes (it is deleted when used or expired) and a short log of when codes were requested for your address, only to limit abuse. The code is emailed to you through our email provider.

Your location

If you tap "Use my location" on Find Jobs, your browser sends your coordinates to us once so we can find the nearest ZIP code. We don't store or log the coordinates; only the ZIP you then choose to search or save is kept.

Browser helper

If you use the optional DropJobs Helper extension, the site sends it your matched alerts. It keeps a short-lived queue of those events, which we delete after about an hour.

What our application doesn't store

Our application code doesn't record your IP address or browser details, with one exception: when you send a message through the Support page we keep a short, one-way scrambled version of your IP address next to it, only so we can limit spam, and it cannot be turned back into your address. Our hosting and network providers (for example Cloudflare) do process these as part of delivering the site, under their own policies. Some pages also load code libraries, such as charts, from public content-delivery networks, which can see your IP address when they serve the file.

How we use it

• To send the alerts you asked for, within your plan's limits and delays.
• To run your account, take payment and give you the plan you bought.
• To show your own stats and the weekly leaderboard, where other members see you only as a shortened name (the first three letters of your name followed by “***”).
• To pay referral rewards and prevent abuse such as fake accounts.
• To keep the Service secure and working, and to answer your support messages.
• To send service messages (verification, billing and account notices). We don't use your details for advertising.

Who we share it with

We don't sell your personal information. We share it only with the services that help us run DropJobs, and only what they need:

• Discord — sign-in and message delivery.
• Stripe — payments and billing.
• Cloudflare and our hosting providers — delivering the website.
• Our email provider — verification and account emails.
• Browser push services (run by browser and device makers such as Apple, Google and Mozilla) — delivering push notifications.

We may also disclose information if the law requires it, or to protect the Service and its users from fraud or abuse. If we are ever part of a sale or merger, your information may transfer to the new owner, who must honor this policy.

How long we keep it

• Account and alert settings: until you delete your account.
• Sign-in sessions: up to 30 days, or until you log out.
• Browser-helper events: about an hour.
• Backups: we keep rotating database backups (daily copies for about a week and weekly copies for about a month), so deleted information can remain in a backup until it rotates out.
• Billing records: we may keep payment-related records as long as the law requires.

Your choices

• Stop alerts: use Pause all alerts in My Settings, turn off push in your browser, or block the bot's DMs.
• Email: every email we send includes an unsubscribe link where that applies.
• Access, correction and deletion: email [set SUPPORT_EMAIL in .env] from the address on your account and we'll help you see, fix or delete your information. We'll confirm it's really you first.
• Cookies: you can clear or block them in your browser, though you'll need to sign in again.

Depending on where you live (for example California or the European Economic Area), you may have additional rights, such as to know what we hold, to correct or delete it, or to object to certain uses. You can exercise them by contacting us, and we won't treat you differently for doing so.

Security

We protect your information with measures such as hashed passwords and session tokens and encrypted connections. No online service is perfectly secure, so please use a strong, unique password.

The Chrome helper

The DropJobs Helper is an optional browser extension. This is exactly what it does and does not touch.

• What it reads. Your own job alerts from this site, using the sign-in you already have here. It reads nothing else on this site.
• What it opens and clicks. It opens employer hiring pages. Only if you switch auto-click on, it clicks the buttons for the first steps of an application (Select schedule, Apply, Next, Create application) and then stops. It never submits for you, and it stops at a sign-in or captcha page.
• What it keeps on your device. Your switches, this site's address, the ids of recent jobs it already opened, and the job it is watching. All of it stays in your browser's extension storage, and removing the extension deletes it.
• What it never does. It does not read passwords, form fields, cookies or your browsing history, does not run ads or analytics, does not sell anything, and does not download code from anywhere.
• Permissions. Storage, alarms, tabs and notifications; the employer hiring site; and this site, which Chrome asks you to allow when you save its address.
• Developer builds. A developer-only recorder exists in the source tree. It is not in the downloadable or store version, and when used it keeps everything on the device until the developer exports it.

Children

DropJobs is for people 18 and over. We don't knowingly collect information from anyone younger. If you think a child has given us information, contact us and we'll delete it.

Changes

If we change this policy in a significant way, we'll tell you on the site or by message before it takes effect. The date at the top shows when it was last updated.

Contact

[set OPERATOR_NAME in .env] · [set SUPPORT_EMAIL in .env]