We can't lose what we don't have.

FIRSTJOBZ was built so there's nothing to leak. No email. No password. No name you didn't choose. That isn't a policy we wrote to look good — it's how the whole thing is built.

The data controller.

FIRSTJOBZ, CHALFONT HOUSE, KEETONS ROAD, LONDON SE16 4BZ. Contact: [email protected].

Nothing that identifies you.

• No email address. You sign in with Face ID or a fingerprint (a passkey). The board never asks for an email and never stores one.
• No password. There's no password to reuse, phish, or breach.
• No real name required. If you add a display name it can be any nickname you like — it only ever appears on your own masthead. Leave it blank and your account is just a random handle.
• No trackers, no ad pixels, no analytics cookies. The page is the same for everyone. Nothing follows you around the web.

Only what makes your FirstJobz Portal yours.

• The brands and categories you picked, so we can show you your board.
• Which roles you've ticked as "applied" and your launch checklist — so they follow you across your devices.
• Optional saved filters. If you set them: an age band, a coarse area and a travel distance. The area is only the first part of a postcode — a district like SE1, never your full postcode and never your exact address. It's optional, you can change or delete it anytime. It is stored only in your own account — never logged, never shared. Distances are worked out on your own device.
• An 18+ confirmation. FIRSTJOBZ is for over-18s, so we keep a single yes/no flag that you confirmed you're 18 or older. We do not ask for or store your date of birth — just that one boolean and when you ticked it.
• Your passkey's public key and a random account handle. A public key can't be used to impersonate you; the private half never leaves your device.

That's the lot. It lives in a single small database on our own server in the UK. It exists only to render your personal edition.

Paying is the one place an email appears.

The board itself still holds no email. If you choose to join FIRSTJOBZ Pro you pay on a secure page run by Stripe, our payment provider. Stripe asks for your email plus your card so it can take payment, send your receipts and send any renewal reminders.

• We never see or store your card. Stripe handles your payment details on its own page.
• Your board account holds a membership reference only. It is a random-looking code from Stripe that tells us your membership is active. It is never your email.
• Your billing details sit in our Stripe account. We are responsible for them. We use them for three things only: running your membership, answering your billing questions, keeping the tax records the law requires.
• Cancel anytime from the Manage membership button on the Pro page. Deleting your FIRSTJOBZ account also ends your membership then removes your customer record at Stripe. Stripe keeps the payment records it must keep by law.

The CV Builder

The CV Builder runs in your browser. What you type stays on your device. We never receive it. We can see which industry's examples you open and nothing you write.

We post to our own channel. We never touch yours.

FIRSTJOBZ runs its own YouTube channel and publishes its own short videos to it using YouTube API Services. This is an internal tool, authorised only by our own Google account for our own channel.

• It touches none of your data. This use does not collect, read, store or share any information about you, any other visitor or any other YouTube user. It only handles our own videos and whether they're published.
• No YouTube player on this site. The board does not embed YouTube videos, so nothing on these pages loads YouTube or tells YouTube anything about your visit.
• What it holds and deleting it. The only thing stored is a reference to each of our own videos plus its publish state. Ask us to remove anything about this at [email protected]. We can revoke this access at any time from the Google security settings page at https://security.google.com/settings/security/permissions.
• Google's own policy. How Google handles data is set out in the Google Privacy Policy at http://www.google.com/policies/privacy.

Delete it all, anytime.

From your settings you can remove a device, regenerate your recovery codes, or delete your account outright. Delete means delete — one action wipes your handle, your picks, your ticks and your passkeys in a single cascade. There's no shadow copy and no "deactivated" limbo.

Logs, security & contact.

• Server logs keep a short-rotation record of requests for security and abuse-prevention. Where an IP address is touched for rate-limiting it is anonymised to a /24 block — we never store a full address against anything you do.
• No email is ever sent by the app. There are no magic links, no newsletters, no "someone signed in" notices. The only mailbox is [email protected], for talking to a human.
• Alerts (coming later) will use browser push notifications you opt into — the browser generates an anonymous subscription; there's still no email and nothing that identifies you.

Where some of the words come from.

Some careers guidance in the Playbook and guides is adapted from public sector information.
Contains public sector information licensed under the Open Government Licence v3.0.