Privacy

Testing phase · last updated August 2026

What we store

Your email address, for sign-in and the reminders you request, and a one-way hash of your password. We cannot read your password.
What you give the map: first name, birth year or age, your one-line prompt, check-ins, past roles, and diary notes. The map is computed from these. Your prompt and diary notes are encrypted at rest; see Security.
One cookie, to keep you signed in. No advertising or tracking cookies. Analytics, if enabled, are cookieless visit counts with no personal profile.
Looking without an account creates a guest map: no email, nothing to identify you, and it is erased after 30 days of inactivity unless you save it. Guest histories never enter the shared map.
Feedback you send is stored encrypted. Sent while signed out, it carries no identifier at all.

What we do with it

Career sequences of the form "someone moved from role A to role B after N months" are extracted without your name, email, or any identifier, and improve the shared map for everyone. That is the whole exchange. Nothing is sold, and nothing else is shared.

Deleting your account

Profile → Settings → Delete account. Removal of your account, maps, check-ins and diary is immediate and permanent. The anonymous sequence rows contain no link to you and remain in the map.

Contact

[email protected] for questions and deletion requests.