Privacy
What this site stores when you check a posting or a CV, why, who receives it, for how long, and what you can do. Last updated 12 November 2026.
Karsten Rieke, a private person, is responsible for the data on this site. Address and email are on the imprint.
- A pasted job posting, the report, the chat and any letter, to produce the report you asked for. Basis: providing what you asked for (Article 6(1)(b) of the GDPR) and the site owner's interest in running the site (6(1)(f)). A posting is not meant to hold personal data; please do not paste confidential text.
- The text of a CV you upload (email addresses and phone numbers are removed automatically; an uploaded file itself is not kept), stored with its report, to produce your report, chat and letter. Basis: your consent, given by ticking the box on the upload page (6(1)(a)), and for any health, religion, union membership or similar detail you leave in it, your explicit consent (9(2)(a)). Please remove a photo and such details first; they are not needed.
- A note that you agreed (time, wording version, and a reference that does not name you), to be able to show that consent was given. Basis: 6(1)(f).
- A salted hash of your network address, not the address, to limit how many checks one visitor can run and so to prevent abuse and cost. Basis: 6(1)(f). Roadmap votes use the same hash so one person counts once.
- A wish you send from the roadmap page, as you wrote it, with your email address only if you give one. Basis: your consent (6(1)(a)); do not put a CV or other personal details in it.
- The record of how each answer was produced (the traces), which contains the posting, the CV text and the chat, so that the owner can find and fix errors. Basis: 6(1)(f). It is deleted with the report.
Anyone who has your report link, and the site's owner, who can read every report, CV, chat and trace on this site. The owner does not use uploaded CVs for testing, training or any other purpose, and nothing about you is added to any list or pool.
an AI model provider, which produces the report, the answers and the letter; the company that runs the model it chooses; and the host of this site, netcup, Nuremberg, Germany. Models are chosen by the owner and can change; the site asks OpenRouter to use only providers that say they do not collect or train on prompts. Each of these acts on the owner's instructions under its own terms.
The model providers can process your text on servers outside the EEA, including in the United States. Protection there can be weaker than in the EU. For an uploaded CV, this is why you are asked to agree before anything is sent. If you do not agree, do not upload a CV: the start page works with a posting alone, which should not contain personal data. Copies held by a provider follow that provider's own retention rules.
- Checks of a posting against the owner's CV: 30 days, then deleted.
- Your own CV, the posting, the report, chat, letters and traces: as you choose on the upload page, about 2 hours after your last action, or 30 days. “Delete my report” on the report page removes all of it at once.
- The note that you agreed: 12 months. Wishes: 12 months, or sooner on request. Votes: while the roadmap shows the item.
- Daily server backups at the host can still hold a deleted report for up to about a week until they roll over.
- The host's web server may keep network addresses in its own logs for a short time.
You can ask for access to your data, correction, deletion, restriction, a copy in a portable form, and you can object to processing based on legitimate interest. Where processing rests on your consent, you can withdraw it at any time by deleting your report; this does not affect what happened before. Write to the email address on the imprint. You can also complain to a data protection authority: in Italy the Garante per la protezione dei dati personali (garanteprivacy.it), or the authority where you live.
No. You do not have to use the site or upload a CV. No decision about you is made by the site: a report is a reading by software, shown only to you.
Pages for visitors set no cookies and store nothing in your browser: no local storage, no session storage, no tracking, no third-party requests (the fonts are served from this site). The colour setting lasts for the page only. The administrator's login page uses one session cookie, which is needed to keep the administrator signed in.
Software, working from Karsten Rieke's CV or from the CV you uploaded. The reports and letters are not statements by Karsten Rieke, and nothing is sent to anyone on your behalf.