Privacy Policy

1. Controller

Croche Code - Alexander Fischer
c/o Online-Impressum #6871
Europaring 90
53757 Sankt Augustin
Germany

Email: contact@crochecode.com

2. Scope of This Privacy Policy

This privacy policy applies to the Bullshit Job Detector website and the AI-assisted analysis of job postings offered through it. It describes how personal data is processed when you access and use the website, submit a job posting, and generate and view the investigation report.

3. Hosting, Security and Abuse Prevention

This website is hosted on Cloudflare Workers. When you use the website, Cloudflare may process technical data such as your IP address, date and time of access, requested pages, browser and device information and referring URL. This processing is necessary to deliver the website, maintain security and stability and prevent abuse. The legal basis is Art. 6(1)(f) GDPR.

The analysis form uses Cloudflare Turnstile to distinguish legitimate requests from automated abuse. Turnstile processes technical browser and request information and provides a short-lived verification token. The token is used only for abuse prevention and is not used by this application to create user accounts or permanent user profiles. The legal basis is Art. 6(1)(f) GDPR.

To limit requests, the application temporarily processes the IP address and a daily request counter. This data is not stored permanently in a database. Technical log data may be retained for up to three days.

Cloudflare Web Analytics is enabled to provide aggregated information about website usage and technical performance. This may include the page path, referring website, country, device type, browser and operating system, as well as technical measurements. Query strings are not logged.

According to Cloudflare, Web Analytics does not use cookies, localStorage or fingerprinting to collect usage metrics and does not collect or use visitors' personal data for this analytics service. To the extent that the technical delivery and measurement nevertheless involves the processing of personal data, the legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to understand aggregate website usage and improve the service's usability, reliability and performance. Further information is available in the Cloudflare Web Analytics documentation.

Cloudflare and its subprocessors may process personal data outside the European Economic Area. According to Cloudflare's Data Processing Addendum, applicable transfers may rely on adequacy decisions, the EU-U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses and additional safeguards, as applicable. Further information is available in the Cloudflare Data Processing Addendum and the Cloudflare Turnstile Privacy Addendum.

4. AI-Assisted Job Analysis

When you run an analysis, the job posting you submit is sent to the website's server and to OpenAI's API. Please do not submit confidential or sensitive personal information that is unnecessary for the analysis. The service analyzes the submitted text; it does not make factual determinations about real people, employers or organizations.

The legal basis for processing and transmitting the submitted content is Art. 6(1)(f) GDPR. Our legitimate interest is to provide the AI-assisted analysis initiated by the user and to operate the service.

API response storage is disabled and the operator has disabled voluntary sharing of API inputs and outputs with OpenAI. OpenAI may nevertheless retain abuse-monitoring logs containing certain customer content for up to 30 days by default, unless longer retention is required for security or legal reasons. Different retention rules may apply if specific OpenAI data controls such as Modified Abuse Monitoring or Zero Data Retention were enabled for the project; these controls are not currently enabled.

For customers in the EEA, OpenAI's applicable business and data processing arrangements identify OpenAI Ireland Ltd. as the relevant contracting entity. Where personal data is transferred outside the EEA, OpenAI's Data Processing Addendum provides for applicable safeguards, including adequacy decisions, the EU-U.S. Data Privacy Framework and the European Commission's Standard Contractual Clauses, as applicable. Further information is available in the OpenAI Data Processing Addendum.

5. Browser Session Storage

The submitted job posting and analysis result may be stored in your browser's sessionStorage. This data is scoped to the current browser tab and is normally removed when the tab or browser session ends. It is not stored by the application in a permanent database and is not used to create a permanent public result URL.

6. Language Preference

We use the functional cookie IBBD_LOCALE to remember your selected language for up to six months. It contains only the selected language code and is not used for advertising or analytics. The legal basis is Art. 6(1)(f) GDPR and Section 25(2)(2) TDDDG.

7. Embedded Legal Notice

The legal notice is provided through an embedded page from Online-Impressum.de, operated by Clear-Media UG (haftungsbeschränkt), Europaring 90, 53757 Sankt Augustin, Germany. When you open the legal notice, your browser connects directly to Online-Impressum.de and technical information such as your IP address, browser information, access time and referring URL may be processed by the provider and its technical service providers.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to provide the legally required provider information while using the provider's address-protection service. Online-Impressum.de's technical service providers may process data in other countries. Further information, including information on applicable international transfers, is available in the Online-Impressum.de Privacy Policy.

8. Advertising

Advertising functionality for Google AdSense is being prepared but remains disabled until the required domain approval and consent setup are complete. If Google AdSense is enabled, this privacy policy will be updated to reflect the advertising and consent configuration actually in use before such data processing is activated.

9. Contact by Email

If you contact the operator by email, the information you provide is processed to handle your request and retained for as long as necessary for that purpose and to comply with applicable legal obligations. The legal basis is Art. 6(1)(f) GDPR and, where processing relates to a contractual or pre-contractual matter, Art. 6(1)(b) GDPR.

10. Recipients

Depending on how you use the website, recipients of personal data may include Cloudflare (hosting, security, Turnstile and Web Analytics), OpenAI (AI analysis) and Online-Impressum.de / Clear-Media UG (embedded legal notice). Google will be added as a recipient when AdSense is actually enabled and the corresponding consent setup is active.

11. Your Rights

Under the GDPR, you may have rights of access, rectification, erasure, restriction of processing, data portability and objection. You also have the right to lodge a complaint with a competent supervisory authority. You may contact us using the details above to exercise your rights.

12. Changes

This privacy policy may be updated to reflect legal, technical or product changes. The version published on this page is the current version.