What we hold, and why

Augusto Galuppo, a private individual based in Berlin, Germany, operates Docket and decides how your data is processed. Contact: galuppodev@gmail.com.

Your account. Name, email address and profile picture, as supplied by Google or GitHub when you sign in. We never receive your password.

Your register. For each application: company, website, position, city, country, the stage it is in, the technologies detected, the timezone you stamped it in, and the dates. Two fields are free text and hold whatever you type — your notes and the job advertisement you pasted. Interviews you schedule store a title, time, duration, place and notes.

Technical. One cookie, which keeps you signed in. There is no advertising, tracking or profiling cookie, so there is no consent banner to click.

Contact. When you use the contact form, we receive the name, email address, subject and message you provide so we can read and reply to your request.

Counting. Seven things are counted so we can tell whether the site works: the landing page being opened, the detector on it being used, the pricing section being reached, the sign-in screen being opened, an account being created, a first entry being stamped, and a paid feature being reached on the free plan. Nothing is stored on your device to do it — no cookie, no local storage — so an anonymous visit leaves no identifier behind and cannot be joined to a later one. Your IP is dropped before the measurement is sent. What you paste into the detector on the landing page is never transmitted: only the fact that the box was used. Two of the counts — an account being created and a first entry being stamped — are tied to your account, because by then you have one.

Running your account and keeping the register is the performance of our agreement with you — art. 6(1)(b) GDPR. Keeping the service secure and preventing abuse rests on our legitimate interest, art. 6(1)(f). Follow-up emails are sent only after you switch them on, and switching them off stops them. Contact messages are processed to answer the request you chose to send, under our legitimate interest in providing support.

The notes and job-description fields accept anything. Art. 9 GDPR treats data about health, beliefs, union membership and similar as a special category with stricter rules. Docket is not built to hold that, and the fields say so where you type. Please keep it out.

Everything stays inside the European Union. These are the only companies that process your data on our behalf, each under a data processing agreement:

One more thing your browser does: to show a company logo it asks logo.clearbit.com, falling back to Google’s favicon service. Those requests carry the company’s domain name and your IP address, never your identity or your notes.

For as long as you keep the account. Delete it and every entry, tag, stage event, interview and reminder goes with it, immediately and without a recovery window. Backups held by our database provider roll off on their own schedule.

A message sent through the contact form is the exception: it arrives as an email and stays in the inbox that answers it, so deleting your account does not delete it. Ask and it is removed.

Under the GDPR you may access, correct, delete and take your data, restrict or object to processing, and withdraw consent. Two of those need no request at all: Settings exports everything as JSON or CSV, and deletes the account, at any time and on every plan.

For anything else, write to galuppodev@gmail.com. You can also complain to a supervisory authority — ours is the Berliner Beauftragte für Datenschutz und Informationsfreiheit.

If you are in Brazil, the LGPD gives you equivalent rights and the same address answers them.

Sell your data. Share it with recruiters or employers. Use it to train anything. Show you advertising. There is no other side to this product: the register has one reader, and it is you.

If this page changes in a way that affects you, the date at the top moves and you will be told by email before it takes effect.