What JobTrailr stores, who can read it, and which other companies see any of it. Last updated 15 September 2026.
The short version. JobTrailr is a personal job-application tracker. Everything you put in it belongs to your account and nobody else — including the person who runs JobTrailr — can read it through the app. It is not sold, shared or used for advertising. A handful of other services are involved in making it work, and every one of them is named below.
There is no analytics, no tracking pixel, no advertising identifier and no third-party cookie. JobTrailr does not record which pages you visit or how long you spend on them.
Only you. Every row in the database is locked to the account that created it by a row-level security rule, so one signed-in person cannot read another's data even by asking the database directly.
One deliberate exception: the once-a-day job scan runs on a server with elevated access, because it has to write suggestions into your account while you are not there. It reads your scan preferences and the list of companies you follow, and writes new matches. It does not read your notes, your files or your CV.
By default, files you upload — your CV and any attachments — are stored in JobTrailr's own storage, where they are readable only by your account and served through short-lived links that expire after two minutes.
You can instead connect your own Google Drive, in which case new uploads go
to a folder called JobTrailr that you own. JobTrailr asks only for the
drive.file permission, which lets it see the files it created there and nothing else
in your Drive. It cannot read, list or touch any other file you own. Connecting is optional,
you can disconnect at any time, and disconnecting leaves your files in your Drive.
| Supabase | Hosts the database, sign-in and the default file storage. This is where your data lives. |
| Cloudflare | Serves the website itself. It sees the request, not the contents of your account. |
| Google Gemini | Only if you upload a CV. The file is sent once, at that moment, to read your details out of it and offer to fill in your profile. It sees the whole document, including your contact details. It is not sent again afterwards. |
| Google Drive | Only if you connect it. Files you upload go to your own Drive. |
| Google Sign-In | Only if you sign in with Google. |
| Adzuna | Job search. Your search words are sent; your identity is not. |
| Employer career systems | Greenhouse, Lever, Ashby, Workday and similar, when you follow a company or run the daily scan. They receive a request for their own public job listings and learn nothing about you. |
| Google Fonts | Serves the typeface. Your browser's IP address reaches Google when the page loads. |
| Google favicons | Company logos in your list are fetched by domain name, so Google sees which companies' logos are being requested. |
Until you delete it. Deleting an application deletes its attachments with it. Deleting your account removes your rows and the files stored for you.
If you had connected Google Drive, files already in your Drive stay in your Drive — they are yours, and JobTrailr does not reach into your Drive to remove things after the fact. Delete the JobTrailr folder yourself if you want them gone.
JobTrailr is run by one person. Write to amalskumar.ngr@gmail.com with anything at all — a question, a correction, a deletion request.