Privacy Policy

Last updated October 30, 2026.

FightGhostJobs is a place to check job openings that employers disclose. This page says what we keep about you and why.

If you visit our marketing site

When you visit our marketing site at fightghostjobs.com, we use Cloudflare Web Analytics to count visits and see which pages are read. It does not use cookies. It reports the page viewed, the page that sent you here if any, your country, and your device type, browser and operating system. We use these totals to see whether the site is working. We do not use them to identify you, and we do not combine them with any email address you give us. Cloudflare may receive technical information such as your IP address and browser type to provide Cloudflare Web Analytics.

If you look up openings

To search, you confirm an email address by clicking a link we send you. We keep that address and the date you confirmed it, so you only have to confirm again after 90 days. We do not show your address to employers or to anyone outside FightGhostJobs and the providers named below, and we do not send you anything but the links you ask for.

We record which openings were shown to you in each search, which ones you opened, and each time you ask for an apply link, together with the email-confirmed identity that asked. We keep these records so we can count visits and trace abused links. They are not sold.

If you comment on an opening, we keep the comment, the time and your email-confirmed identity. Other candidates and the employer see the comment and the time, never who wrote it. You cannot edit or delete a comment once it is posted; we hide a comment when our staff decide to, after a report or an employer's contest; the hidden text stays in our records. A report you file (about a comment, or about a link that led somewhere wrong) is kept with your identity and read only by us.

What we keep about your searches

Each time you search for a company, a job title or an opening, we keep a record of the search. The record holds the exact words you typed, any KIO ID or requisition number you typed or that the extension read from the job page (a mistyped ID is kept exactly as typed), the time, whether the search found anything, and a scrambled code made from your email-confirmed identity. The code is not your email address. We use it to tell whether the same person searched more than once. We do not count it as a new search if you repeat the exact same search within 24 hours.

If you search with the FightGhostJobs browser extension, the record also holds the web address of the site you were on when you ran the search. That is the site name only, such as example.com, never the page, the path or anything you typed there. The extension sends it only at the moment you run a search. It does not watch the sites you visit.

We use these records to count how often companies and titles are searched for, to show employers what people look for about their own openings, and to decide which employers to invite to FightGhostJobs. We do not sell them, we do not use them for advertising, and we do not use them to build a profile of you.

What employers and staff can see

Employers never see who searched. An employer that has joined FightGhostJobs can see, by month, totals for searches about its own company. When a search did not find one of its openings, the employer can also see the words that were typed. It sees all of this only when at least five different people made the searches. Below five, the report says "fewer than 5" and shows no number and no words.

When a search was made with the extension, the employer can also see the name of the site it was made from. Sites that are webmail, social media, search engines or private are shown only as a category, never by name. A site that fewer than five people searched from is not named; it is grouped with other small sites. Seeing a site in a report means searches were made from it. It does not mean a posting is or is not current there.

Our staff can see exact totals for any company, including companies with only a few searches, and the words typed and, for extension searches, the site names, by month, in order to understand demand and to invite employers. Staff reports do not show who searched.

How long search records are kept

We keep the full record of each search for 12 months. After that, the record moves to a restricted archive that only our administrators can reach, and we keep it there. We use the archive for monthly counts and trends, and to answer a request from you to delete your search records. To make that request, write to privacy@fightghostjobs.com. Monthly counts keep the words searched as totals only, with no code that points to you. A deletion request also removes the record of which openings were shown to you and which you opened. We keep monthly counts of the openings shown and opened, and of searches, which hold only totals with no code that points to you. We keep the record of the apply links we issued to you, to trace abused links.

If you list or register openings

We keep your name, your work email address, the organization you belong to, each sign-in, each change to your organization's roster, and every change you make to an opening, with the note you wrote. Candidates see the opening's disclosed facts, never your name or address.

We email you about the openings and rosters you are responsible for, and about nothing else: when an admin adds you to a roster, when an opening of yours is five days and one day from closing, when it expires, when a scheduled opening goes live or could not be published, at most one email in each six-hour period when candidates leave new comments on it, and when a comment you contested is decided. These emails carry the opening's title and KIO ID, never its description, a comment's text or an apply link. They come from noreply@fightghostjobs.com; replying reaches sales@fightghostjobs.com. There is no unsubscribe for these operational messages yet; every sent email is logged and the log is pruned after 90 days.

If you ask to be told when we open

Our marketing site links to a signup form where you can leave an email address to be told when we open. There are two separate lists: one for candidates, told when the site opens to candidates, and one for employers, told when the employer pilot opens. You can join one or both.

The form is hosted by Brevo, our email service provider, and uses Google reCAPTCHA to keep automated sign-ups out.

We first send you one email asking you to confirm the address. Nothing else is sent until you click the link in it, and the link works for 30 days. We keep your email address, which list you joined, the time you submitted the form and the time you confirmed. Brevo also records whether you opened or clicked in the confirmation email.

After you confirm, we send you one message when the event happens, and nothing else. We do not add you to any other list or use the address for any other purpose. We delete your address within 30 days after that message is sent.

You can leave sooner by using the unsubscribe link in any of our emails or by writing to privacy@fightghostjobs.com. If you leave, we keep only what we need to make sure we do not email you again.

These lists are kept apart from the rest of FightGhostJobs. Joining a list does not create an account, and having an account does not put you on a list. We do not sell, rent or share your address with anyone for their marketing.

Cookies

We set no cookies of our own. Your sign-in is kept in your browser's local storage until you sign out or your email confirmation expires. The provider that fronts our API (Cloudflare) sets one short-lived bot-protection cookie, __cf_bm, on the API's own domain for about 30 minutes; it does not identify you to us and we do not read it.

The visit counts on our marketing site use no cookies. If you open the signup form, the form is provided by Brevo and uses Google reCAPTCHA, and each of them may set cookies or collect information about your device under its own privacy policy.

Who processes the data

FightGhostJobs runs on Supabase (database, sign-in and functions), with Cloudflare in front of it; the site is served by GitHub Pages; sign-in links are sent through Resend. Place names come from GeoNames and the U.S. Census Bureau.

Emails to the notify-me lists are sent through Brevo, which also hosts the signup form. Google reCAPTCHA protects that form against automated sign-ups. Visit counts on the marketing site come from Cloudflare Web Analytics.

How long

We keep the other records on this page for as long as FightGhostJobs exists. Rate-limit counters are deleted within a day; the daily tally of refused requests is kept 30 days. To ask about your data, write to privacy@fightghostjobs.com.

Notify-me addresses are the exception. They are deleted as described in the notify-me section above, not kept for as long as FightGhostJobs exists.