Privacy
Plain-language summary of what JoRoute stores, why, and how to delete it.
What JoRoute stores
| Data | Why | How long |
|---|---|---|
| Your answers in My experience (evidence) and the items derived from them, with their status | To show you suggestions and build your summary from what you confirmed | Until you delete them or your profile |
| A random profile id and the time it was created | To keep your items together | Until you delete your profile |
| A session cookie (random token; only its SHA-256 hash is stored on the server) and a form-protection token | To recognise your browser without a password | 30 days, then expired and purged |
| Career reflection — only if you press "Save": the value statements you tick and the examples you write (not your date of birth, name or number) | To use them as confirmed values and evidence in your profile | Until you delete them or your profile |
| Public job listings from employers' official job boards | Job search | While listed; removed listings are deleted 90 days after removal |
What JoRoute does not store
- Text you paste into Check a job offer — it is analysed in memory and discarded. Links in it are not opened.
- Your searches, IP address or the content of your requests in JoRoute's own logs. They record only the page type, status and response time. If JoRoute is hosted behind a web server, that server keeps standard access logs (IP address, page path, without search terms); the operator must state how long.
- Date of birth, age, gender, race, religion or similar attributes — there are no fields that store them, and nothing about you is inferred from them. The optional career reflection (currently switched off) uses a date of birth (and, if you choose, a name) only to calculate on that page: they are not stored, logged or sent anywhere, and numerology is never used to score, rank or filter you.
Sharing
JoRoute has no advertising, no third-party analytics and no data sales. It contacts outside services only to fetch public job listings and, when you tick the box on the check page, to look up a company domain's public registration (RDAP), sending only the domain name. If you connect Claude through the optional local MCP server, Claude can read your evidence in sessions you start.
Where it is kept and how it is protected
In JoRoute's own database file on the computer or server running JoRoute. Access is limited to your browser session; other profiles cannot read your items. The file is not encrypted by JoRoute itself; protection at rest otherwise relies on the operating system (file permissions, disk encryption).
Deleting your data
Delete single answers or items in My experience, or use Delete my profile in My experience to remove everything at once. Deleted data is overwritten in the database file (secure delete) and the profile cannot be recovered. Clearing your browser cookies loses access to the profile but does not delete it.