Flagdown

Privacy

Last updated 27 September 2026

Flagdown is a job-search tool. This page says what it holds about you, why, and how to remove it. It is written to be read, not to be skimmed past.

What we collect

  • Account: your email address, a hashed password, and, if you use it, the identifier Google gives us for your account. Your name if you give it.
  • Profile: what you tell us or confirm from your CV: skills and how long you've used them, job titles held, headline, home town, and optional contact details for the autofill. The CV file itself is read once and not stored.
  • Preferences: pay floors, currency, arrangement, commute distance, titles wanted and unwanted, watches.
  • Activity: which postings you shortlisted, applied to, dismissed or wrote notes on, and when.
  • Technical: server logs with IP addresses, kept for a short period for security. Page views and a few in-app actions (fetching jobs, finishing setup, subscribing) are counted with Umami, which we host ourselves; it sets no cookie and stores no identifier that follows you between visits.

What we do with it

Score postings against you, run your watches, draft your application material, and send you the emails you ask for: confirmation, password reset, and, if you opt in, watch alerts. Nothing else. We do not sell or share your data for advertising.

Where it goes

  • Your home town is sent to OpenStreetMap's Nominatim service to find its coordinates, once, when you set it.
  • Exchange rates are fetched from Frankfurter (European Central Bank data). Nothing about you is sent.
  • Emails are delivered by Resend, which processes your email address to do so.
  • If you buy a pass, Stripe takes the payment. We receive a confirmation and the amount, never your card details.
  • If you connect Google, Google confirms your email to us. We do not read anything else from your Google account.
  • If you set a phone-alert topic, the job title, company and watch name are sent to ntfy.sh. This is off unless you turn it on.
  • Optional AI features, when switched on, send the posting and your profile to Anthropic to draft material. They are off by default and clearly marked.

Postings themselves come from public job boards and employers' own careers pages. Nothing about you is sent to any board or employer until you apply, which you do yourself.

Cookies

One session cookie, so you stay signed in, and one optional "remember me" cookie.

No advertising or tracking cookies.

Keeping and deleting

Your data is kept while your account exists. Delete your account from the account page and everything above is removed immediately: profile, preferences, activity, watches and tokens. Postings we found stay, because they are not about you. Server logs expire on their own.

You can also ask for a copy of your data or its deletion by email at hello@flagdown.live.

Who we are

Flagdown is operated by its developer in the United Kingdom. Contact: hello@flagdown.live. If you are in the UK or EU you have the rights set out in the UK GDPR and GDPR, including access, correction and erasure, and the right to complain to the ICO or your local authority.