Privacy

Last updated: 2026-05-05

In short

We don't collect anything personal unless you tell us. We use analytics cookies to see which pages people read, but only after you click Accept on the cookie banner. Decline and we don't set them.

What we collect, by section

Browsing the site

• Server logs (IP, user agent, URL): kept ~7 days, used to diagnose abuse and outages, never sold.
• Analytics cookies (opt-in): Google Analytics 4 and PostHog if you click Accept. They set first- and third-party cookies to attribute pageviews and sessions. Decline → none of this fires.
• IP geolocation: on first visit we look up country/coords from your IP via ipapi.co so the globe auto-rotates to your region. Result is cached in a cookie on your device for 30 days. We don't store the IP.

Clicking Apply now

We record the click so we can show employers how their listings performed. We hash your IP with a per-deploy salt and keep the first 16 hex characters — enough to count unique clicks per day without keeping anything that could re-identify you.

Posting a job

The email you provide is used only to send the magic-link confirmation and a one-time notification when your post goes live (or is rejected). No marketing.

Your controls

• Change your cookie choice anytime via the Cookieslink in the footer.
• Want a job posting removed? Email [email protected] from the address you submitted with.
• UK / EU residents: you have GDPR rights to access, correct, and delete data. Same email works.

Data processors

Tools we use that touch user data:

• Cloudflare (CDN, DDoS) — sees every request, standard log retention.
• Google Analytics 4 (opt-in) — pageview, session, geographic data.
• PostHog (opt-in, EU-hosted) — pageview, session, optional product events.
• Resend — sends the magic-link / approval emails.
• ipapi.co — IP→country lookup for the globe.

Toplisters.xyz is a product by Ainika, developed by Lyrava. See About for the broader context.