Privacy Policy

1. Who is responsible for your data?

Codestelle is responsible for the processing of personal data described in this Privacy Policy.

For privacy-related questions or requests, contact: [email protected]

2. Data processed when you visit Codestelle

When you access Codestelle, technical information necessary to deliver, secure and operate the service may be processed automatically. This may include:

• IP address;
• date and time of the request;
• requested URL and HTTP information;
• browser and device information;
• referrer information, where provided by your browser;
• technical and security-related log information.

This information is used to operate the platform, diagnose technical problems, prevent abuse and maintain the security and reliability of Codestelle.

3. Job Alerts

If you create a job alert, Codestelle processes the information needed to provide that service. This may include:

• your email address;
• the search criteria and filters associated with the alert;
• confirmation and unsubscribe information;
• technical information required to manage and deliver the alert.

We use this information to confirm your subscription and send matching job opportunities. You can unsubscribe using the link provided in job alert emails. Signed-in users can also pause or resume confirmed alerts associated with their verified account email from Saved jobs & alerts.

Confirmation and unsubscribe links may contain unique security tokens. These tokens are used to identify the relevant alert securely and should not be shared with others.

Saved jobs

When you save a job, we store its identifier, the time you saved it, and a minimal title, company and location snapshot linked to your account. This lets you manage your shortlist across devices and recognize saved jobs that are no longer available. No job description or application URL is copied into your saved list.

Saved jobs remain until you remove them or your account is deleted. Saving a job does not subscribe you to emails or submit an application.

4. Employer Features and Submitted Jobs

If you use Codestelle's employer features, we process information necessary to provide and secure those features. Depending on how you use the service, this may include:

• your email address;
• email verification and sign-in information;
• company information you provide;
• job posting information you submit;
• application links and related job information;
• administrative information associated with reviewing and managing submissions.

Employer submissions may be reviewed before publication. Email verification confirms control of an email address but does not by itself establish authorization to represent a company.

5. Email Delivery

Codestelle uses external email infrastructure to send transactional messages such as job alert confirmations, job alerts and service-related emails.

Information required for email delivery, including the recipient's email address and message content, may therefore be processed by the email service providers used by Codestelle.

6. Infrastructure and Security Providers

Codestelle uses infrastructure and security service providers to host, deliver and protect the platform. These providers may process technical information such as IP addresses, request metadata and security-related information where necessary to provide their services.

Codestelle currently uses Cloudflare for services including DNS, security, content delivery and email routing.

7. External Job and Application Links

Codestelle contains links to websites operated by employers, applicant tracking systems and other third parties.

If you follow an external application link, you leave Codestelle. The respective third party is responsible for its own processing of personal data, and its privacy policy and terms apply.

Codestelle does not control the privacy practices of external employers or application platforms.

8. Cookies and Local Storage

Member accounts

If you create an account, we store your email address, a salted password hash, verification status, account creation time and security information such as failed sign-in counts and active sessions. We do not store your password in plain text. Verification and password-reset emails are sent through our transactional email provider.

Member sign-in uses a necessary Secure, HttpOnly cookie with a maximum seven-day session lifetime. Verification and reset links are single-use and expire. Signing out revokes the current member session; resetting your password revokes all member sessions. Passwords and session tokens are not stored in browser local storage. For account deletion or other data requests, contact [email protected].

Codestelle may use browser storage or technically necessary mechanisms where required to provide platform functionality, remember user choices or maintain security.

Codestelle does not use such technologies to create advertising profiles unless this Privacy Policy is updated to explain that use.

9. Purposes and Legal Bases

Personal data is processed only where there is an appropriate legal basis. Depending on the feature and circumstances, processing may be necessary:

• to provide a service you requested;
• to take steps requested by you before entering into an agreement;
• to comply with legal obligations;
• for legitimate interests such as operating, securing, improving and protecting Codestelle, where those interests are not overridden by your rights and interests;
• where applicable, based on your consent.

10. Data Retention

Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected, to operate and secure the service, or to comply with applicable legal obligations.

Different categories of information may have different retention periods. Data may also be retained where necessary to establish, exercise or defend legal claims.

11. Service Providers and Data Recipients

Codestelle may share personal data with service providers where this is necessary to operate the platform, including hosting, infrastructure, security and email delivery providers.

These providers receive only the information required for the relevant service and process information subject to their applicable contractual and legal obligations.

Personal data may also be disclosed where required by law or where necessary to protect legal rights, users or the security of the platform.

12. International Data Transfers

Some service providers may process information outside Austria or the European Economic Area. Where required, appropriate safeguards for international data transfers are used in accordance with applicable data protection law.

13. Your Data Protection Rights

Depending on the circumstances and applicable law, you may have rights including:

• the right to access your personal data;
• the right to correct inaccurate personal data;
• the right to request deletion of personal data;
• the right to restrict processing;
• the right to object to certain processing;
• the right to data portability where applicable;
• the right to withdraw consent where processing is based on consent.

To exercise a privacy right or ask a privacy-related question, contact [email protected].

You may also have the right to lodge a complaint with the competent data protection supervisory authority.

14. Security

Codestelle uses technical and organizational measures intended to protect personal data against unauthorized access, alteration, disclosure or loss.

No internet-based service can guarantee absolute security.

15. Changes to this Privacy Policy

This Privacy Policy may be updated when Codestelle's features, service providers or legal obligations change. The current version and its update date will be published on this page.