Privacy

This site sets no cookies and shows no ads. Fonts and scripts are served from this domain. Nothing from another site loads until you use the assistant or the fit check.

The first time you click into the question box, or send a job post on the fit check, Cloudflare Turnstile checks that you are a person. It loads from challenges.cloudflare.com and its subdomains, and runs under Cloudflare's own privacy policy.

After that check, your browser keeps a signed visitor token in local storage for up to 30 days, so that the limit of 10 questions applies to you. The conversation stays in this tab's session storage and is gone when you close the tab. Clearing this site's data in your browser removes both.

Each question is stored for 90 days, after email addresses, phone numbers and links are removed from it. Next to it I keep the sources the answer used, how the answer was prepared and checked, the cards it showed, the model, token counts, response time and whether it worked. I read this log to fix wrong answers and to keep costs and abuse in check.

Your IP address is never stored. To apply the daily limits it is turned into a one-way hash with a key that changes every day, so one day cannot be linked to the next. Questions are linked to a hashed visitor id, never to your name or IP address.

If you reach the limit and use the email or LinkedIn button on the card that appears, that click is counted once and kept for 90 days.

If you use "Mistakes? No plz ;)" to report an answer as wrong, the report is kept for 90 days next to the question it answers. Nothing else is asked.

The fit check analyses the job post you paste once, and that analysis counts as one of your 10 questions. The job text is never stored or logged: only counts are kept, such as how many requirements it had and how they were rated.

Questions, and job posts pasted into the fit check, are sent to OpenAI, which generates the answers as a processor working for me. Each request is sent with storage turned off (store: false) and carries a one-way code derived from your visitor token, so OpenAI can spot abuse without knowing who you are. OpenAI may still keep requests for up to 30 days to monitor for abuse.

The public status page shows hourly totals only: how many questions were answered, response times, cost per conversation, cache use, uptime, and the share of visitors who reached the limit and then clicked email or LinkedIn. It never shows question text, visitor ids or hashes.

The site runs on Cloudflare, which handles every request as the hosting provider. The question log is kept in Cloudflare's database service, and only I can read it.

For questions about this notice, or a request about your data, email me:

tsvillaluenga@gmail.com