Privacy

Who we are

RealJobs is a job board operated as a personal project, based in the Netherlands. The data controller is the operator of this site, reachable at privacy@kilili.io.

What we collect

• Form submissions. When you submit feedback, report a listing, suggest a company, or register interest as an employer, we store what you typed: an optional or required email address (the requirement depends on the form), an optional message, and any field-specific values relevant to that form (verdict, tier preference, listing slug, company name).
• Anonymous analytics. We use Umami Cloud to count page views and basic interaction events (apply clicks, row clicks, etc.). Umami runs without cookies and without storing IP addresses or any cross-site identifiers.
• Server logs. Vercel (our host) keeps short-lived access logs that include IP addresses for routine operational purposes (rate-limiting, abuse handling). We do not query or use these logs ourselves.
• What we do NOT collect. No tracking cookies, no account system, no behavioural profiles, no third-party advertising pixels.

Why we collect it (lawful basis)

• Form data: consent (GDPR Article 6(1)(a)). You actively submit it; you can request deletion any time.
• Anonymous analytics: legitimate interest (Article 6(1)(f)) — operating and improving a free job board. The data cannot identify you, so the impact on your privacy is minimal.
• Server logs: legitimate interest (operational security and abuse prevention). Vercel handles this on our behalf.

Sub-processors

The following third parties process data on our behalf. Each link opens that company's own privacy policy.

• Vercel — application hosting and edge delivery.
• Neon — PostgreSQL database hosting (form submissions are stored here).
• Umami Cloud — cookieless analytics.
• Logo.dev — company logo CDN. Your browser fetches logos directly from img.logo.dev, so Logo.dev sees the referrer header (the page you're on) and your IP for the duration of the request.

How long we keep data

• Form submissions are kept while we triage them and act on the content (e.g., a listing report leading to a listing being pulled). We delete on request.
• Anonymous analytics events are retained according to Umami Cloud's defaults — typically 12 months — and contain no identifiers we can tie back to you.
• Server logs are short-lived per Vercel's retention policy (linked above).

Your rights

Under GDPR you have the right to access, correct, or delete personal data we hold about you, to object to processing, and to lodge a complaint with a supervisory authority (in the Netherlands, the Autoriteit Persoonsgegevens).

To exercise these rights, email privacy@kilili.io. We respond within 30 days. Because we don't have an account system, please send your request from the email address you used in the form so we can locate the record.

Children

The service is not directed to children under 16 and we do not knowingly collect their personal data.

Changes to this policy

We update this page when our processing changes. Material changes will be reflected in the “Last updated” date at the top.

Contact

Questions, deletion requests, or anything else: privacy@kilili.io.