Skip to main content
Privacy Policy

Your data, your business.

Last updated: 21 August 2026

The short version

  • Blog posts, the explore tool, and country pages are free with no account required
  • The interactive tools hub requires a free account (email + optional profile fields)
  • We only collect information you actively provide or consent to
  • We do not sell your data to anyone, ever
  • We do not run advertising networks or ad trackers
  • Analytics are consent-gated (off by default) and EU-hosted where possible
  • Account data and contact-form submissions are stored securely, encrypted at rest
  • This policy applies to visitors from all countries worldwide

1. Who we are and how to contact us

WorldJobsData ("we", "us", "our") is an independent research project operating the website at worldjobsdata.com. This Privacy Policy explains what personal data we collect from visitors anywhere in the world, why we collect it, how we use it, and what rights you have over it.

Data controller: WorldJobsData, an independent research project operated from India. Contact via worldjobsdata.com/contact.

For privacy-specific requests (access, deletion, correction, complaints) please use our contact page and put "Privacy Request" in the subject line. We aim to respond within 30 days, and within the legally required timeframe for your jurisdiction.

2. What data we collect

2.1 Data you give us voluntarily

The personal data we collect is limited to what you actively choose to submit:

  • Account registration - to access the interactive tools hub, you create a free account by providing your email address and a password. Your password is hashed by Supabase (bcrypt) and is never stored in plain text. During or after sign-up you may optionally provide: your name, role or profession, intended use case, and country of residence. These fields are entirely optional and can be left blank.
  • Contact-form submissions - name, email address, and message content, when you contact us via the contact page.
  • Waitlist sign-up - email address, if you signed up for early-access notifications.

Most of the site - the blog, country pages, the explore tool, and the Intelligence map - is fully accessible without an account. An account is required only to use the interactive tools hub.

2.2 Analytics data (consent-gated)

We use analytics tools to understand how the site is used so we can improve it. We only activate analytics tracking after you click "Got it" on our cookie notice. If you click "Decline", no analytics tracking occurs for your session.

When analytics are active, the following tools may process data:

  • PostHog (EU-hosted) - active only on the interactive explore tool at /explore. Collects anonymous, aggregate usage events such as which features were used. Does not create advertising profiles. No cross-site tracking. PostHog privacy policy →
  • Google Analytics 4 (Google LLC, USA) - collects anonymised page-view and session data. We have IP anonymisation enabled. Google may process data on servers in the United States under Standard Contractual Clauses. Google privacy policy →
  • Vercel Analytics & Speed Insights - privacy-first page performance metrics. Does not use cookies. Vercel privacy policy →

2.3 Data we do NOT collect

  • No advertising trackers or cross-site behavioural tracking
  • No precise location data (country-level only, where analytics are consented)
  • No access to your device camera, microphone, contacts, or files
  • No financial information of any kind
  • No sensitive personal data (race, religion, health, political views, etc.)
  • No data from children under 13 (or under 16 where required by local law)

3. Legal bases for processing (GDPR / UK GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or another jurisdiction with similar requirements, we are required to state the legal basis for each processing activity:

  • Contract performance (Article 6(1)(b)) - creating and maintaining your account (email address, hashed password, and optional profile fields) so you can access the interactive tools hub; this is processing necessary to deliver the service you requested
  • Legitimate interests (Article 6(1)(f)) - responding to contact-form enquiries; improving the service using aggregate, anonymous analytics; maintaining security logs
  • Consent (Article 6(1)(a)) - all analytics tracking (PostHog, Google Analytics). You may withdraw consent at any time by clearing your browser's localStorage for worldjobsdata.com, or by contacting us
  • Legal obligation (Article 6(1)(c)) - retaining records where required by applicable law

4. How we use your information

We use information strictly for the purpose for which it was collected:

  • Account data (email, hashed password, optional profile fields) - to authenticate you, grant access to the interactive tools hub, and personalise your dashboard (for example, showing your quiz result and tool visit history). Optional profile fields (name, role, use case, country) are used only to tailor the experience; they are never sold or shared with advertisers.
  • Contact-form submissions - to reply to your enquiry. We do not add you to any mailing list as a result of a contact submission.
  • Analytics data - to understand which countries and features are most useful, identify technical issues, and improve the site. We never use analytics data to build advertising profiles or for any commercial purpose beyond operating the site.

We do not use any personal data for automated decision-making, profiling, or advertising.

5. Who we share data with

We do not sell, rent, or trade your personal data. We share data only with the following service providers, each of whom processes data solely as instructed by us under binding data-processing agreements:

  • Supabase - provides authentication and database services. Supabase stores account credentials (email address + bcrypt-hashed password), optional profile fields (name, role, use case, country), contact-form submissions, and waitlist sign-ups. All data is encrypted at rest. Supabase processes data under Standard Contractual Clauses for international transfers. Supabase privacy policy →
  • PostHog - EU-hosted analytics, active only on /explore (see Section 2.2 above)
  • Google LLC - Google Analytics 4 (see Section 2.2 above)
  • Vercel Inc. - website hosting and infrastructure. Vercel privacy policy →

We may disclose personal data if required to do so by law or a valid legal process, but only to the extent legally necessary.

6. International data transfers

WorldJobsData is accessible globally. Data you submit may be stored or processed outside your country of residence, including in the United States and European Union. Where we transfer data internationally, we rely on one or more of the following safeguards:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • The UK International Data Transfer Agreement (IDTA) for UK-originating transfers
  • Service providers certified under recognised adequacy frameworks

You may request details of the specific transfer safeguards applicable to your data by contacting us.

7. Cookies and browser storage

We use browser localStorage (not HTTP cookies) for site functionality. We do not use advertising cookies. The following keys may be set in your browser's localStorage for worldjobsdata.com:

  • Analytics consent (wjd_consent) - stores your "Got it" or "Decline" choice. Stored locally only; never sent to our servers.
  • Auth session token (sb-zbfsnvizwygwmehxizce-auth-token) - if you are signed in, Supabase sets a JWT session token so you stay logged in between visits. This token is sent to Supabase's servers on authenticated API requests. It is removed when you sign out or clear site data.
  • Local profile mirror (wjd_profile) - a local copy of your optional profile fields (name, role, use case, country) so the dashboard loads instantly. Synced from Supabase on sign-in; removed on sign-out.
  • Activity history (wjd_activity) - stores your quiz result (score and risk group) and a count + timestamp of visits to each interactive tool. Used only to power your personal dashboard. Stored locally; never sent to our servers.
  • Country bookmarks (wj-watchlist) - the list of countries you have saved in the explore tool. Stored locally only.
  • Anonymous session ID (wj-uid) - a randomly generated identifier (no personal information) used in the explore tool for aggregate, anonymous analytics events (PostHog). Only active if you have accepted analytics. Clearing site data removes it immediately.
  • Reaction history (wjd_react_*) - one key per blog post you have reacted to, preventing duplicate reaction submissions. Stored locally only.
  • Explore tool state (wjd-ca, wjd-cd, wj-lc) - caches the last-loaded country data and UI state in the explore tool so the page loads faster on return visits. Stored locally only.
  • Tool visit state (e.g. country-comparison, disruption-timeline) - records the last visit timestamp for each interactive tool, used to display "last visited" in your dashboard. Stored locally only.

To remove all stored data, clear site data for worldjobsdata.com in your browser settings (typically under Privacy & Security → Site Data). Signing out of your account removes the auth token and profile mirror automatically.

8. Data retention

  • Account data - retained for as long as your account is active. You may delete your account at any time by contacting us; we will remove your email, hashed password, and profile fields from Supabase within 30 days.
  • Contact-form messages - retained for up to 24 months to support follow-up enquiries, then deleted.
  • Waitlist email addresses - retained until you request removal. Contact us to be removed.
  • Anonymous analytics data - retained in aggregate form with no link to individual visitors. Aggregate statistics may be retained indefinitely.
  • Browser localStorage - persists until you sign out, clear your browser storage, or we update the relevant feature. The auth session token is invalidated server-side on sign-out.

9. Your rights

Depending on where you live, you have rights over your personal data. We honour these rights for all users, regardless of location:

  • Access - request a copy of the personal data we hold about you
  • Correction - ask us to correct inaccurate or incomplete data
  • Erasure ("right to be forgotten") - ask us to delete your personal data
  • Restriction - ask us to pause processing while a dispute is resolved
  • Data portability - receive your data in a machine-readable format
  • Objection - object to processing based on legitimate interests
  • Withdraw consent - where processing is based on consent, withdraw it at any time without affecting prior lawful processing
  • Non-discrimination - exercising privacy rights will never affect your ability to use the site

To exercise any right, contact us with your email address and what you would like us to do. We will respond within 30 days (or within any shorter period required by your local law).

EEA and UK residents

You have the rights set out in the GDPR (EEA) and UK GDPR (United Kingdom) as described above. You also have the right to lodge a complaint with your national supervisory authority:

  • EEA: your national Data Protection Authority - find yours at edpb.europa.eu
  • United Kingdom: Information Commissioner's Office (ICO) - ico.org.uk

California residents (CCPA / CPRA)

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have additional rights:

  • Right to Know - categories and specific pieces of personal information collected, the purposes of collection, and third parties with whom it is shared
  • Right to Delete - request deletion of personal information we have collected from you
  • Right to Correct - request correction of inaccurate personal information
  • Right to Opt Out of Sale or Sharing - we do not sell or share personal information for cross-context behavioural advertising; no opt-out is needed, but you may contact us to confirm
  • Right to Limit Use of Sensitive Personal Information - we do not collect sensitive personal information as defined under CPRA
  • Right to Non-Discrimination - we will not discriminate against you for exercising any CCPA/CPRA right

To submit a CCPA/CPRA request, contact us. We will verify your identity and respond within 45 days (extendable by a further 45 days where necessary).

Categories of personal information collected in the last 12 months: Identifiers (email address, account UUID); Account credentials (bcrypt-hashed password - not readable by us); Professional or employment-related information (role, use case - optional, provided voluntarily); Geolocation data (country of residence - optional, provided voluntarily; country-level only from analytics where consented); Internet or network activity (anonymous usage events, with consent). Purpose: operating and improving the service, authenticating account holders. Disclosed to: service providers listed in Section 5 only. Sold or shared for advertising: No.

Canadian residents (PIPEDA / Law 25)

Residents of Canada have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) and provincial equivalents (including Quebec's Law 25). You may request access to your personal information and ask us to correct inaccuracies. Contact us using our contact page.

Brazilian residents (LGPD)

Residents of Brazil have rights under the Lei Geral de Proteção de Dados (LGPD), including the right to access, correct, delete, and port your data, and to revoke consent. Contact us to exercise these rights. You may also lodge a complaint with the Autoridade Nacional de Proteção de Dados (ANPD) at gov.br/anpd.

Indian residents (DPDPA)

WorldJobsData is operated from India. Under India's Digital Personal Data Protection Act 2023 (DPDPA), you have the right to access personal data we hold about you, correct inaccuracies, and request erasure of data that is no longer necessary for the purpose for which it was collected. Analytics consent is obtained via our cookie notice before any tracking begins, consistent with DPDPA consent requirements. To exercise your rights, contact us and we will respond within 30 days.

Other jurisdictions

We aim to honour reasonable privacy requests from users in all countries, including those with national privacy laws such as Thailand's PDPA, Singapore's PDPA, Japan's APPI, South Korea's PIPA, Australia's Privacy Act, and others. If you believe we hold personal data about you, contact us and we will respond in good faith.

10. Security

We apply industry-standard security measures including:

  • HTTPS (TLS) encryption for all data in transit
  • Encryption at rest for all data stored in our database
  • Strict access controls - only necessary personnel can access personal data
  • Content Security Policy (CSP) and other HTTP security headers on all pages
  • Regular review of third-party service providers' security practices

No method of transmission or storage is 100% secure. If you have reason to believe a security incident has affected your data, please contact us immediately.

11. Children's privacy

This service is not directed at children. We do not knowingly collect personal data from anyone under 13 years of age (or under 16 where required by applicable law, including the GDPR). If you believe a child has submitted personal data to us, please contact us and we will delete it promptly.

12. Changes to this policy

We may update this policy to reflect changes in our practices, service providers, or applicable law. The "Last updated" date at the top of this page always reflects the current version. For material changes, we will post a notice on the homepage. We encourage you to review this policy periodically.

13. Contact and complaints

For any question, request, or concern about this policy or our data practices, please contact us. We read every message and aim to respond within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant supervisory authority for your country (see Section 9 above for EEA, UK, and Brazil contacts).