We can't lose what we don't have.

FIRSTJOBZ was built so there's nothing to leak. No email. No password. No name you didn't choose. That isn't a policy we wrote to look good — it's how the whole thing is built.

Nothing that identifies you.

• No email address. You sign in with Face ID or a fingerprint (a passkey). We never ask for an email and never store one.
• No password. There's no password to reuse, phish, or breach.
• No real name required. If you add a display name it can be any nickname you like — it only ever appears on your own masthead. Leave it blank and your account is just a random handle.
• No trackers, no ad pixels, no analytics cookies. The page is the same for everyone. Nothing follows you around the web.

Only what makes your FirstJobz Portal yours.

• The brands and categories you picked, so we can show you your board.
• Which roles you've ticked as "applied" and your launch checklist — so they follow you across your devices.
• Optional saved filters. If you set them: an age band, a coarse area and a travel distance. The area is only the first part of a postcode — a district like SE1, never your full postcode and never your exact address. It's optional, you can change or delete it anytime. It is stored only in your own account — never logged, never shared. Distances are worked out on your own device.
• An 18+ confirmation. FIRSTJOBZ is for over-18s, so we keep a single yes/no flag that you confirmed you're 18 or older. We do not ask for or store your date of birth — just that one boolean and when you ticked it.
• Your passkey's public key and a random account handle. A public key can't be used to impersonate you; the private half never leaves your device.

That's the lot. It lives in a single small database on our own server in the UK. It exists only to render your personal edition.

Delete it all, anytime.

From your settings you can remove a device, regenerate your recovery codes, or delete your account outright. Delete means delete — one action wipes your handle, your picks, your ticks and your passkeys in a single cascade. There's no shadow copy and no "deactivated" limbo.

Logs, security & contact.

• Server logs keep a short-rotation record of requests for security and abuse-prevention. Where an IP address is touched for rate-limiting it is anonymised to a /24 block — we never store a full address against anything you do.
• No email is ever sent by the app. There are no magic links, no newsletters, no "someone signed in" notices. The only mailbox is [email protected], for talking to a human.
• Alerts (coming later) will use browser push notifications you opt into — the browser generates an anonymous subscription; there's still no email and nothing that identifies you.

Where some of the words come from.

Some careers guidance in the Playbook and guides is adapted from public sector information.
Contains public sector information licensed under the Open Government Licence v3.0.