Privacy
Last updated 1 October 2026
What we keep, why we keep it, and how you get rid of it. Written to be read, not to be survived.
🧑💻 Who is responsible
dontwanttoworkthere and iwanttoworkthere are run by the company named at the bottom of every page, which is responsible for your data.
Write to hello@iwanttoworkthere.com about anything on this page.
🔑 When you sign in
- Your email address, so you can get back in, we can reach you about your account, and we can send the emails you manage in 🔔 Notifications.
- A name and a sticker you choose. Both can be anything, and friends in a circle see them.
- Your language, which side you came from, and the place you prefer to look if you pick one. Only your own lists use it.
- A sign-in cookie. It holds a random code, never your email.
- If you sign in with Google or LinkedIn, they tell us your email address and nothing else. We never post anything there.
✍️ When you write a review
- The company, the month, the role, how far you got, the flags you picked, your ratings, how it ended and your one line.
- Your own answer to whether you want to work there, which decides the side the review lives on.
- Whether it is for friends only or public, and whether the company may message you.
- A public review never shows your name, your email or your picture.
📎 When you verify a review
- You give us the email you received. We check it in memory: its signature, who sent it, the company and when it was sent. To check the signature we look up the sender's public key through Cloudflare's DNS resolver; the sender can at most see that a common key name was looked up, never by whom.
- The email is never stored or logged. We keep only: verified yes or no, which of the two ways it was verified (signed by the company's own address, or sent through its hiring system, with that system's name), and a one-way code made from its signature with a key only we hold, so the same email cannot verify a second review. The code cannot be turned back into the email.
- Screenshots stay inside circles and are never published.
🫂 Circles
- Who is in your circle, the invite code, and the comments and reactions inside it.
- A company never sees a circle. It only ever sees counts, like everyone else.
- Leaving a circle removes you from its thread.
- A GIF you post in a circle keeps only what points to it at GIPHY: its id, its address, its size, its title and the GIPHY account that made it. It goes when the post goes.
🏢 Companies
- A work email address to prove the page belongs to them, and who on the team has access.
- Their replies, their thanks, their reports and their orders.
- A company never learns who wrote a review, even when it replies or when you allow messages.
📌 Jobs
- We never take an application. Applying opens the company's own site or email.
- Apply taps are counted as numbers only, with no user and no address stored.
- Your CV never touches this site.
✨ The AI helpers
- Speaking instead of typing sends that recording once to Cloudflare Workers AI and it is dropped straight after.
- Filling a review from your words, and translating a review, work the same way: sent once, nothing stored, nothing used for training.
- Nothing is posted until you read it and tap the button yourself.
- You can use the site fully without ever touching these.
🍪 Cookies
- One sign-in cookie, and one that remembers your language.
- No advertising cookies, no trackers, no profile of you across other sites.
📈 Counting visits
- We count page views with nothing about you in them: the shape of the page, the side, the country the network tells us, and what kind of site sent you (an AI assistant, a search engine, a social site) as one word. The address you came from stays in your browser.
- If you said yes in the cookie bar, your device also makes a random number for the day so we can count people, not just clicks. It changes at midnight and is never joined to your account.
- The age group on your profile is optional and only ever leaves as a number in a group.
🤝 Who else touches the data
- Cloudflare, for hosting, the database, file storage and the AI helpers. Data sits in Europe.
- Google, whose mail service carries sign-in links and the other emails we must send you. Resend carries the notifications, the daily summary and the welcome email.
- A logo service and a public icon service, which receive a company's website address, never anything about you.
- Nobody buys this data. We do not sell it and we do not share it for advertising.
- Cloudflare, Google, Resend and GIPHY are US companies. Sending data to them is covered by the EU-US Data Privacy Framework, and for Cloudflare, Google and Resend also by the EU's standard contract clauses.
- GIPHY, a US company, only for GIFs inside a circle. Opening the GIF picker and searching in it send your IP address and what you type from your browser straight to GIPHY. A GIF posted in a circle loads from GIPHY as soon as it is on or close to your screen, so GIPHY then sees your IP address and which GIF it was, even if you never tap it. We never send GIPHY your name, your email or your account, and we keep none of your searches. What GIPHY does with it is in its own policy at giphy.com/privacy.
⏳ How long we keep things
- Sign-in links: 15 minutes. Sign-in sessions: 30 days, or until you sign out.
- Your reviews: until you delete them or your account.
- Anonymous counts in a company chart: they stay, with nothing linking them to you.
- Operator decisions in the audit log: 24 months, so moderation can be checked.
- Reports: your name and email until we have answered, the rest 6 months after the decision.
- Your email switches: until you change them or delete your account. Copies of the emails at Resend: 30 days. If you mark one as spam or it bounces, Resend keeps your address on its do-not-send list.
🔐 Your rights
- Download everything we hold about you, from Your data, in one tap.
- Delete your account, and choose: keep my reviews as anonymous posts, or remove them.
- Correct anything wrong, or ask us to stop using something. Write to hello@iwanttoworkthere.com.
- Complain to the data protection authority where you live, or to ours in Sweden, IMY (imy.se), if we get it wrong.
- Stop any email that has a switch, with the link inside it or in 🔔 Notifications.
🧒 Age
- This site is for people old enough to work. If you are under 16, please do not sign up.
📝 Changes
- When this page changes, the date at the top changes with it.
- If a change matters to you, we say so on the site before it starts.
🎬 When you record a video story
- The mask and the voice change are done by your own phone, before anything is sent. We never receive the plain picture or your real voice.
- We keep the finished clip, how long it runs, which mask and voice you picked, and the review it belongs to.
- A clip waits for us to look at it before anyone can see it. Only you and the operator can open it while it waits.
- Delete the clip and the file goes from storage as well as the page. Deleting your account takes your clips with it.
- Your @handle shows on your videos and your storyteller page. It never appears on a written review.
🌍 When a public review is not verified
- You choose whether a review stays with friends or goes public. Public means anyone can read it, including the company.
- Without a checked email the review is shown as not verified yet, and the company chart counts it separately.
- A public review still carries no name, no photo, no employer of yours and only the month.
🚩 Reports, removals and appeals
- Anyone can report something, with no account. We keep what the report is about, the reason, your explanation and, only if you give them, your name and email.
- We use your email only to confirm your report and tell you our decision. Then we delete it with your name and your explanation, 30 days after the decision at the latest.
- What was reported, the reason and what we decided stay 6 months, with nothing about you, and then go.
- We never store your IP address. Too many reports at once are stopped by a counter that forgets within a minute.
- If we act on something you posted, we email you why. We never tell anyone who reported it.
- If a report suggests someone’s life is in danger, we may give the police what we already hold about the post and who wrote it, and nothing more.
⚖️ Why we are allowed to
- Your account, your reviews and your circles: you asked us to run them for you.
- Keeping the site safe, stopping spam, the anonymous counts and the moderation log: our legitimate interest in a fair site that works.
- The daily visitor number: only if you said yes in the cookie bar. You can take that back at any time.
- Reports, our answers and the emails about them: the EU Digital Services Act requires us to take reports, confirm them and answer (Articles 16 and 17).
- Opening the GIF picker and searching GIPHY: you asked for it. Showing the GIFs posted in your circles: part of running your circles, which you asked us to do.
- Emails about friends and companies, and the daily summary: you asked for them when you switched them on in 🔔 Notifications, and you can switch them off at any time. The welcome email: our legitimate interest in showing you how to add your first review and bring friends in. You can refuse it on the sign-in screen, in 🔔 Notifications or with one tap in the email.
📬 Emails we send
- 🔒 Always sent, no switch: sign-in links, company invites, report receipts and decisions, and answers about your data. You asked for them, or the law says we must send them.
- 🫂 Friends: a friend tags you, replies to a thread you started or joins a circle you started. 🏢 Companies: a company answers your review or writes to you. Both are off until you switch them on in 🔔 Notifications. We gather them into one email, at most every 12 hours.
- 📬 Daily summary: at most once a day, only when something new is waiting in your circles or at companies you follow. Off until you turn it on.
- 💌 Welcome email: one email at least a day after you join, showing how to add your review and bring friends into a circle. Only if you have not added a review yet, and only once. It is on by default: switch it off on the sign-in screen, in 🔔 Notifications or with the link in the email. Accounts made before 1 October 2026 get it once too.
- These emails say what kind of thing happened and how many times. Never who wrote it, what they wrote, or the name of a circle or a company. No tracking pixels, no tracked links.
- Every one of them has a link that stops it with one tap, no sign-in needed. Or change them any time in 🔔 Notifications.