Privacy policy

Mostly, your data never leaves your browser. This page says exactly where it does, who is responsible, and what your rights are. It describes what the code at hirewire.fyi does, not marketing promises.

HireWire · last reviewed 2026-10-22

What stays on your device

The app saves its state under hirewire.* keys in localStorage and mirrors them to an IndexedDB database named hirewire-kv. If localStorage is wiped, the app restores from that mirror. After you save your first job, it also asks the browser for persistent storage, which gives some protection against automatic clean-up. Stored on this device:

• your name (used only in drafted emails and briefs), skills, salary floor and currency, and blocked keywords and locations
• your pipeline: saved postings, stages, notes, contacts, next dates, offer figures and the activity log
• the People ledger, saved searches and STAR stories
• your weekly goal, which days you opened HireWire (for the streak), your target role and city from onboarding, career-mode and offer-comparison settings, and a random device ID used only for referral links
• Adzuna and Jooble API keys, if you add them
• a cache of the latest wire, so the page opens instantly
• a compact history of postings your feeds have shown (company, title, location, dates, pay and link; at most 2,000, each dropped after 180 days unseen). It powers the ghost-job risk and the salary reality check, and you can clear it in Insights → Ghost-job check
• follow-up dates, your follow-up schedule settings, and whether you turned on follow-up notifications (those are shown by your own browser; nothing is sent anywhere)
• for the AI fit score: how many free scores you have used, your Job Search Pass (a signed token and its pass ID), your own Anthropic API key if you add one, the scores you received, and your CV text only if you tick “keep my CV” (the sidebar has a “forget it” link)

None of this is sent to HireWire. The app is static files on GitHub Pages. The one exception is the optional AI fit score, which uses a small scoring function and only receives what is listed below.

Three newer optional features also talk to HireWire’s API, only when you use them: Pass Plus AI writing (your CV and one posting, not stored), encrypted sync (data encrypted on your device, which HireWire can’t read) and referral links (counts only).

Who your browser does talk to

“Local-first” doesn’t mean “no network”. Here is every third party the app page contacts:

The page sets referrer to no-referrer, so the job sites you click through to aren’t told you came from HireWire.

Exactly what the analytics collects

Analytics is off unless you switch it on (the small consent banner on the app page; change it any time with “Analytics” in the app footer). Only then does the app page load PostHog, configured with autocapture off, automatic pageviews off, session recording off, surveys off and performance capture off. It then stores a random per-device ID in localStorage, not in a cookie. It never runs if your browser sends Do Not Track or Global Privacy Control, or if the page is opened from a local file. You can switch it off again at any time in the same place; that stops all further events.

Events it sends: a page_load event (with whether storage is available), which tab you open, which named buttons you use (sync, pin, run agent, copy brief, export with its format, backup, restore, extract skills, add or remove a key, open the console, and similar), the name of a pipeline stage when you change one, whether you used the contact dialog, AI fit score button names (score, rescore, copy a rewrite, open passes, start checkout, restore a pass, add or remove your own key), and button names for the ghost-job check, salary CSV and follow-ups (for example “check”, “copy”, “mark sent”, which Insights section you open). Never the job, the salary figures or the email text.

Never sent to the analytics by HireWire’s code: job titles, companies, search text, skills, CV text, fit scores or fix text, notes, contacts, salary floor, API keys, pass IDs, or sponsor clicks.

Newer features add more event names of the same kind, for example onboarding step, install, notifications on, sync on or restored, referral shared or claimed, AI writing used, career mode on, and paywall shown. Page addresses are stripped of query strings and # fragments before they are sent, so referral codes, payment session IDs and jobs saved from the extension never reach the analytics.

To be precise: like any web request, PostHog sees your IP address, and its library attaches standard metadata such as browser, operating system, screen size and the page URL. PostHog can estimate a rough location from the IP. If you don’t want any of this, simply leave analytics off. The app works the same either way.

These guide pages (everything outside the app) load no analytics at all.

The optional AI fit score

Inside any posting you can press Score with AI. Google’s Gemini model rates your CV against that posting from 0 to 10 and lists the fixes that would raise the score. Nothing is sent until you press the button. This is what happens to your data when you do:

1. Your browser sends your CV text and the posting’s title, company and description over HTTPS to HireWire’s scoring function (a serverless function on Cloudflare Workers). A free score sends nothing else; with a pass it also sends your pass token.
2. The function checks the size limits and your pass or free allowance, forwards the CV and posting to Google’s Gemini API, checks the answer, and returns it. It does not write your CV or the posting to a database, a file or its logs. Its own log lines only hold error codes such as “upstream busy”. Like any web host, Cloudflare records that a request happened (time, path, status code, IP address), not what was in it. The function runs on Cloudflare’s global network, in the data centre nearest to you, which can be outside the EU.
3. Your browser shows the result and keeps it in this browser, so reopening the posting costs nothing.

Counters, not content. To enforce the free allowance (5 a day per network on the server, on top of 3 per browser) and a fair-use limit on passes, the function may count requests per day in a small Redis store. The key is a keyed hash of your IP address or the end of your pass ID, never the raw IP, and it expires after 2 days.

Google (Gemini API). HireWire uses the paid tier of Google’s Gemini API (Cloud Billing has been active on HireWire’s Google Cloud project since 15 October 2026). Under the Gemini API terms for paid services, Google doesn’t use your prompts or the responses to improve its products, and processes them under its data processing terms. Google logs prompts and responses for a limited period, solely to detect and prevent violations of its Prohibited Use Policy and for any required legal or regulatory disclosures. Google’s terms also say this data may be stored transiently or cached in any country where Google or its agents have facilities. HireWire doesn’t turn on Google Search grounding or any other tool, so the request isn’t combined with a web search.

Your own key. If you paste your own Anthropic API key, scores go straight from your browser to Anthropic and HireWire’s function and Google aren’t involved. Anthropic then processes the request under its commercial API terms; its API data-retention documentation says API data isn’t used to train models without permission. The key is stored in this browser’s localStorage, so anyone with access to this browser profile could read it. Use a key with a spending limit and remove it from shared computers.

Payments. Job Search Passes (7 or 30 days, one-time) are paid on Stripe’s checkout page. HireWire has no accounts. After payment it checks with Stripe that the session is paid and gives your browser a signed pass token. The pass ID shown after purchase lets you restore the pass on another device, so treat it like a licence key.

The AI can be wrong. Its suggested rewrites only re-word what your CV already says and mark numbers you must fill in, but always check that a rewrite is true for you before you use it.

Sponsors

Sponsor slots are hand-sold plain links (rel="sponsored noopener noreferrer"). Clicks aren’t counted, and the sponsor learns nothing about you.

The free tool pages

Ghost-job checker (English, Deutsch): the posting text you paste is checked by JavaScript inside the page. It isn’t sent anywhere or saved. Copy result and the share image are made in your browser.

Salary checker (/salary-checker.html): when you press the button, your browser requests the public job lists of Remotive (with the role you typed as a search term) and RemoteOK. They see your IP address and browser details, like any website. Nothing is sent to HireWire and nothing is stored.

Spreadsheet template (German page): a static file download. No email address or sign-up.

Like all pages outside the app, these load no analytics. Fonts are served from hirewire.fyi itself.

The HireWire Chrome extension

Not yet published The extension is built but not yet in the Chrome Web Store. This section describes exactly what it does once it is.

The optional extension “HireWire — Score this job” adds a small Score on HireWire button to job postings on LinkedIn, Indeed and StepStone. It does two things, and only when you click: it gives that posting an AI fit score against your CV, and it can save the posting to your HireWire tracker.

What it reads from job sites. Nothing until you click the button. Then it reads only the posting you are looking at: its title, company, location, salary (if shown), description and web address. It doesn’t read other pages, your profile, messages or search history, doesn’t run in the background, and makes no requests to LinkedIn, Indeed or StepStone.

Where your CV goes. You paste your CV in the extension’s own settings page, never into the job site. By default it is kept only until you close the browser (chrome.storage.session). If you tick Remember my CV, it is saved in your browser’s extension storage on this device (chrome.storage.local) until you press Forget CV or remove the extension. Your CV is sent only when you press Score: together with the posting’s title, company and description it goes over HTTPS to HireWire’s scoring function and on to Google’s Gemini API for that one request, exactly as described in The optional AI fit score. It is not stored on any server. If you add your own Anthropic API key, the CV and posting go straight from your browser to Anthropic and HireWire’s function isn’t involved.

What the extension stores on your device (browser extension storage, never synced to HireWire):

• the number of free scores used (3 are free),
• your Job Search Pass token, plan, expiry and pass ID, if you bought or restored one,
• your Anthropic API key, if you added one (anyone with access to this browser profile could read it; use a key with a spending limit),
• your CV, only if you ticked Remember (otherwise only until the browser closes),
• the last 50 scores (score, verdict and fixes, the job’s web address; not your CV).

Removing the extension deletes all of it.

Saving a posting. Save to HireWire opens hirewire.fyi with the posting (title, company, location, salary, web address, the first 8,000 characters of the description, the site name and the time) packed into the part of the link after #. Browsers never send that part to any server; the HireWire app reads it in your browser and adds the job to your tracker there, like every other job in HireWire.

Payments. Buy pass opens Stripe’s checkout page in a new tab; the extension never sees your card. After paying you return to hirewire.fyi, which shows your pass ID. Paste it into the extension under Restore pass; the extension then asks HireWire’s function to confirm the payment with Stripe and stores the signed pass on your device. See Payments.

What the extension doesn’t do. No analytics, no tracking, no ads, no remote code, no account. HireWire doesn’t sell or share data from the extension, and doesn’t use it for anything except scoring and saving the postings you choose. The extension requests only the storage permission and access to HireWire’s scoring function; it runs on job pages of LinkedIn, Indeed and StepStone only.

The AI can be wrong. Only use a suggested rewrite if it is true for you. The extension marks quotes from your CV that it can’t find word for word.

Because HireWire stores nothing about you on its servers, there is nothing to delete there; removing the extension deletes everything it kept. Questions: see Contact.

Pass Plus: AI writing

Pass Plus is an optional paid pass (€29 for 30 days, one-time, via Stripe) that adds Write with AI on a posting: a cover letter, interview preparation, a tailored CV draft and a negotiation script. It is also free if you add your own Anthropic API key. Nothing is sent until you press Generate. Then:

• What is sent: your CV text, the posting’s title, company, location, description and stated pay, and the options you chose (tone, language, your notes). For a negotiation script it also sends the offer figures you entered (base, bonus, equity) and, if there are enough postings, the salary benchmark from your own feeds.
• Where it goes: with Pass Plus, over HTTPS to HireWire’s API (the same Cloudflare Worker as the fit score, with your pass token) and on to Google’s Gemini API (paid tier) for that one request. With your own key, straight from your browser to Anthropic. The API doesn’t write your CV, the posting or the draft to a database, a file or its logs; the Gemini API terms described above apply (with your own key, Anthropic’s).
• Fair-use counter: the API counts generations per pass per day, keyed by the end of your pass ID. Those counters expire after 2 days.
• The drafts are kept only in this browser (the last 60 jobs), and are left out of backups and sync. Word (.docx) export is built in your browser; PDF uses your browser’s print dialog.

Reach out drafts

Reach out drafts a short email, a LinkedIn note and a follow-up to the hiring contact for a posting. The first draft in each browser is free; after that it comes with any pass, or is free with your own Anthropic API key. Nothing is sent until you press Generate. Then:

• What is sent: your CV text, the posting’s title, company and description, the language and tone you chose, and, only if you typed them, the contact’s name and role. The contact’s email address is never sent; it only fills the mail link in your browser. A contact suggested from the posting is found by your browser in the posting text; HireWire doesn’t look anyone up.
• Where it goes: over HTTPS to HireWire’s API and on to Google’s Gemini API (paid tier) for that one request, or with your own key straight from your browser to Anthropic. The API doesn’t write your CV, the posting, the contact’s name or the draft to a database, a file or its logs.
• Counters: with a pass, drafts are counted per pass per day (keyed by the end of your pass ID). The free draft is counted per network per day using a keyed hash of your IP address, never the IP itself, and inside the same daily limit as free fit scores. Counters expire after 2 days.
• In your browser: the drafts (the last 60 jobs), whether you have used your free draft, and on a saved job the date you reached out and the follow-up draft. Backups and sync carry only the date, the channel and the language, never the draft text. Opening your mail app or copying a draft is done by your browser; HireWire never sends email.

Encrypted sync

Sync is optional and comes with any pass (restoring on another device works without one). It copies your HireWire data between your devices without HireWire being able to read it:

• When you turn it on, your browser creates a random 256-bit key and shows it once as a recovery code. The key never leaves your devices; you type the code on your other device. If you lose it, HireWire can’t recover your data.
• Your data (profile, pipeline, saved searches, STAR stories, People, follow-up settings and any job-board API keys) is encrypted on your device with AES-256-GCM before upload. AI-written drafts and the sync key itself are never included.
• HireWire’s API stores only the encrypted blob, a sync ID (a SHA-256 hash derived from your key, so it says nothing about you), a revision number and the time of the last upload. It can’t decrypt any of it.
• The stored copy is deleted automatically 180 days after your last upload. Turn off & delete copy in the app deletes it at once, even after your pass has expired.
• To prevent abuse, the API counts uploads per pass per day and downloads per network per hour (a keyed hash of your IP address, never the raw IP). These counters expire within 2 days.

Referral codes

You can share a referral link (hirewire.fyi/?ref=…) that gives a friend 3 free AI fit scores and earns you 3 for each friend who uses it. To make that work without accounts:

• Your browser creates a random device ID and keeps it locally. It is sent only when you create your link or claim a friend’s code. Your referral code is derived from it, so it says nothing about who you are.
• HireWire’s API stores counts only: how many friends claimed your code and how many rewards you have redeemed. To stop one device claiming twice, it stores a keyed hash of the claiming device’s ID with the code. These entries expire after 400 days.
• Claims are limited per network per day using a keyed hash of the IP address, which expires after 2 days.
• Free-score rewards are signed tokens kept in your browser and expire after 90 days.

No names, email addresses or contact lists are involved. Whom you share the link with is up to you. The ?ref= code is removed from page addresses before anything reaches the analytics.

Installable app and offline cache

HireWire can be installed to your home screen or desktop. A service worker then keeps a copy of HireWire’s own files (the app page and other hirewire.fyi pages you open, styles, icons and the manifest) on your device so they open without a connection. It never intercepts or caches job feeds, HireWire’s API, Anthropic, Stripe, fonts or analytics. That cache holds no personal data: your profile and pipeline stay in the same browser storage described above. Clearing the site’s data or uninstalling the app removes the cache too.

Notifications are opt-in and come from your own browser, not from a push server: HireWire has no way to message your device. If you allow them, the app can show at most one notification a day for strong new matches while it is open, and, where the browser supports periodic background sync, a reminder about follow-ups that are due. For that, the browser keeps a tiny schedule on your device with only the due dates of your follow-ups (no job titles or companies).

Safari’s 7-day purge, and backups

Safari (and other WebKit browsers on iPhone and iPad) may delete a website’s stored data if you haven’t visited it for 7 days. Every browser also deletes it when you clear site data. HireWire can’t prevent that, so:

1. Click Backup everything in the sidebar. It downloads hirewire-backup-YYYY-MM-DD.json.
2. Keep it somewhere you control. The app shows a reminder banner when you have data and no recent backup.
3. To restore, click Restore… or drop the file anywhere on the page.

The backup file is plain JSON. It contains your notes, contacts and any Adzuna or Jooble API keys. Treat it like any personal document.

Who is responsible for your data

The controller under the EU and UK General Data Protection Regulation (GDPR) is:

Gaurav Jindal
Krefelder Str. 13
10555 Berlin
Germany
Email: hey@hirewire.fyi

HireWire is a one-person business, so there is no data protection officer; you deal directly with the person responsible.

What we process, why, and on what legal basis

Most of HireWire never reaches us. The table covers what does.

You don’t have to give us any personal data to use the free tracker. To buy a pass, Stripe needs your payment details and email. To get an AI result, the AI needs your CV text.

HireWire makes no decisions about you based solely on automated processing that have legal or similarly significant effects. AI scores are suggestions for you; nobody else sees them.

Please don’t paste special categories of data (health, religion, union membership and similar) into your CV text unless you want them included in the AI request.

Service providers who process data for us

We use these providers. Where they act as our processors, they may only use the data on our instructions under a data processing agreement.

Not our processors: job boards and employer career sites your browser contacts directly, and Anthropic when you use your own API key (you have your own contract with Anthropic). Their own privacy policies apply.

International transfers

Some providers above are based in, or may access data from, the USA or other countries outside the EU/EEA and the UK. We only use them where the transfer is protected: by an EU adequacy decision (for the USA, the EU-US Data Privacy Framework for certified companies, and the UK Extension for UK data), or by the European Commission’s Standard Contractual Clauses (with the UK Addendum or IDTA for UK data). You can ask us for a copy of the relevant safeguards.

How long data is kept

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you and get a copy (Art. 15),
• have it corrected (Art. 16) or deleted (Art. 17),
• restrict how we use it (Art. 18),
• receive it in a portable format (Art. 20). For the data in your browser, Backup everything already does this,
• object to processing based on legitimate interests (Art. 21),
• withdraw consent at any time, for example by switching analytics off. This doesn’t affect processing before the withdrawal,
• complain to a data protection authority, in particular in the EU country where you live or work. The authority responsible for us is the Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin Commissioner for Data Protection and Freedom of Information).

To use your rights, email hey@hirewire.fyi. Because we have no accounts, tell us what identifies your data (for example the email used at checkout, a pass ID or a sync ID). We answer within one month. Most of your data is only in your browser; you can see and delete it yourself.

If you are in the UK

The UK GDPR and the Data Protection Act 2018 give you the same rights as above. You can complain to the Information Commissioner’s Office (ico.org.uk). Transfers of UK data are protected by the UK Extension to the DPF or the UK Addendum / IDTA.

If you are in the United States (including California)

• We do not sell or share your personal information, as “sell” and “share” are defined in the California Consumer Privacy Act as amended by the CPRA, and we don’t use it for cross-context behavioural advertising. We have done neither in the past 12 months.
• Categories we may collect are the ones listed in this policy: identifiers (email, IP address, pass ID), commercial information (passes bought), internet activity (feature events, only with opt-in), and the CV and job text you submit for AI processing (professional information), used only to give you the result. We don’t use sensitive personal information to infer characteristics about you.
• You can ask to know, correct or delete your personal information, and we won’t treat you differently for using these rights. An authorised agent can contact us for you.
• We treat Global Privacy Control and Do Not Track signals as an opt-out of analytics.
• Residents of other US states with privacy laws (for example Colorado, Connecticut, Virginia, Texas) have similar rights; the same email works.

HireWire is a small business and may fall below the thresholds of these laws, but we apply these commitments to everyone.

Other countries

We handle everyone’s data the same way, to the GDPR standard, wherever you live. If your local law (for example in Canada, India, Australia, Brazil, Switzerland or Japan) gives you additional rights, such as access, correction, deletion or withdrawing consent, email us and we will honour them. Using HireWire means your data may be processed in the EU, the USA and other countries where our providers operate, with the safeguards described above.

Children

HireWire is for adults. You must be at least 18 to use it (see the terms). We don’t knowingly process data of children; if you believe a child has used a paid feature, contact us.

Security

All connections use HTTPS. The API doesn’t log request content, keys rate limits to keyed hashes instead of raw IP addresses, and sync data is end-to-end encrypted. No system is perfectly secure; if a breach affecting your data occurs, we will inform you and the authorities as the law requires.

Changes to this policy

We update this page when HireWire changes. The date at the top shows the last review. Significant changes are also mentioned in the app.

Contact

Questions or requests about privacy: hey@hirewire.fyi, or the Contact button in the app. Post: Gaurav Jindal, Krefelder Str. 13, 10555 Berlin, Germany.

A German summary of this page is at /de/datenschutz.html; this English page is the authoritative version.

FAQ

Related

• Terms of Service and Sale
• Right of withdrawal
• Imprint
• Are free job trackers safe?