Privacy Policy

Last updated: July 2026

Who's responsible

The data controller is Aleš Kancilija s.p., Cesta XIV. divizije 20A, 2000 Maribor, Slovenia (registration number: 8453454000, VAT ID: SI 97635057). Reach me at contact@webextjobs.dev. I'll call myself "I" from here on.

The short version: I collect as little data as possible. Developers don't need an account. Employers give me their company info to post jobs. I don't sell anyone's data.

For Developers

What I collect

When you browse WebExtJobs.dev, I collect very little:

  • Server logs — Your IP address, browser type, pages visited, and timestamps. I keep these for up to 30 days for security and debugging.
  • Listing analytics — I count page views and apply button clicks on every listing. These are aggregate counts — I don't tie them to you personally.
  • Fathom Analytics — WebExtJobs.dev uses Fathom to understand how people use the site. Fathom doesn't use cookies, doesn't collect personal data, and doesn't track you across sites.

You don't need an account to browse or apply for jobs. I don't track you across websites.

Newsletter

If you subscribe to the weekly newsletter, I store your email address. I use it only to send you the newsletter. You can unsubscribe at any time from the link in every email, and I'll delete your address.

Cookies

I only use essential cookies:

  • Session cookie — Set only when you log in as an employer. Contains an opaque session token. Expires after 30 days or on logout.

No third-party tracking cookies. No advertising pixels. No social media widgets.

Job listings link to external sites (employer career pages, other job boards, etc.). Once you leave WebExtJobs.dev, that site's privacy policy applies. I'm not responsible for their data practices.

For Employers

What I collect

When you create an employer account and post listings, I collect:

  • Account data — Company name, email address, website, country, and optionally your billing address and VAT ID
  • Listing content — Everything you enter when creating a listing: title, description, location, salary, skills, apply URL, etc.
  • Payment data — Transaction amounts, dates, and Stripe identifiers. Your card details are handled entirely by Stripe — they never touch my servers.
  • Listing analytics — For featured listings, I track and display page views and apply clicks (aggregate counts, no personal data about the visitors).

How I use your data

  • Authentication — WebExtJobs.dev emails you magic links to sign in. Your email is the key to your account.
  • Listing display — WebExtJobs.dev publishes your job listings on the site, in RSS feeds, in search indexes, and (for featured listings) in the newsletter.
  • Payment processing — I process payments through Stripe and keep transaction records for invoicing and tax compliance.
  • Communication — WebExtJobs.dev sends you listing-related emails: expiry warnings, confirmation notices, and account notifications. WebExtJobs.dev may occasionally send product-related emails (e.g. feature updates, listing tips). You can opt out at any time.

AI processing

WebExtJobs.dev sends your listing title, description, and tags to AI providers (Anthropic or OpenAI) for two purposes:

  • Niche validation — Checking that your listing genuinely relates to browser extension development
  • Tag and metadata extraction — Generating relevant tags and SEO metadata to help your listing get found

WebExtJobs.dev only sends listing content — not your account data, email, or payment information. Both providers operate under Data Processing Agreements with Standard Contractual Clauses (SCCs) for EU data transfers.

Data storage

Your data is stored in a primary database hosted within the EU (Neon.tech, eu-central-1) and backed up to a secondary database for disaster recovery. The application server is hosted within the EU (OVH Cloud).

Payment processing is handled by Stripe, which acts as an independent data controller for payment card information.

Data retention

  • Account data — Kept as long as your account is active. Deleted within 30 days of a deletion request.
  • Transaction records and invoices — Kept for up to 10 years as required by Slovenian tax and accounting regulations. After account deletion, this data is anonymized (company details stripped, financial records retained).
  • Expired listings — Archived (not publicly visible) for your reference. Analytics events for long-expired listings are automatically cleaned up after 30 days.
  • Inactive accounts — Accounts with no purchases that haven't been active for 6 months are automatically deleted.

Account deletion

You can delete your account from your dashboard settings at any time. This permanently removes your company data, credits, and listings. Transaction records and invoices are anonymized but retained for legal compliance as described above.

Security

WebExtJobs.dev uses email-based magic links for authentication — no passwords are stored or transmitted. Sessions use cryptographically random tokens, hashed server-side with SHA-256, stored in HTTP-only cookies with SameSite and Secure flags. Payment data is handled entirely by Stripe's PCI-compliant infrastructure.

Common Terms

Third-party processors

I share data with the following services to operate WebExtJobs.dev:

Service Purpose Location
Stripe Payment processing US (DPF/SCCs)
Resend Transactional email US (DPF/SCCs)
Neon.tech (Databricks) Database hosting EU (AWS eu-central-1)
Anthropic AI listing validation US (DPF/SCCs)
OpenAI AI listing validation US (DPF/SCCs)
Fathom Privacy-focused analytics EU
Cloudflare Bot protection (Turnstile) US (DPF/SCCs)

I don't sell your data. I don't share your personal data with anyone beyond the processors listed above. Public listing content (title, company, location, description, etc.) is distributed via the website, email, RSS, AI services, and search engines — but that's public information, not personal data.

Bot protection

WebExtJobs.dev uses Cloudflare Turnstile to protect forms (login, registration, contact, newsletter) from automated abuse. Turnstile may collect limited technical data (browser type, interaction patterns) to verify you're a real person. No CAPTCHAs or personal data required. See the Cloudflare Turnstile Privacy Policy for details.

Your rights (GDPR)

If you're in the EU/EEA, you have the right to:

  • Access — Get a copy of all data I hold about you
  • Rectification — Correct inaccurate information
  • Erasure — Request deletion of your data (subject to legal retention requirements for financial records)
  • Portability — Receive your data in a structured, machine-readable format
  • Objection — Object to processing beyond what's needed to deliver the service

Since I collect minimal data and developers don't need an account, most of these rights primarily apply to employer accounts. You can handle most of these yourself from Dashboard → Settings (edit your data, delete your account). For anything else, contact me.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec RS), Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si.

I process data under the following GDPR legal bases:

  • Contract performance (Art. 6(1)(b)) — Account management, listing publication, payment processing
  • Legitimate interest (Art. 6(1)(f)) — Server logs for security, analytics for site improvement, bot protection
  • Legal obligation (Art. 6(1)(c)) — Tax and accounting record retention
  • Consent (Art. 6(1)(a)) — Newsletter subscription

Changes to this policy

I may update this policy at any time. If I make significant changes, I'll update the date at the top and notify active employer accounts by email. Your continued use of the site means you accept the updated policy.

Contact

For privacy-related requests, contact me. Full legal details are on the Impressum page.