Rolekite Sign in

Privacy policy

Last updated: 30 September 2026

This page explains which personal data Rolekite processes, why, and which rights you have. In short: we only store what we need to show you matching jobs. There is no tracking, no advertising and no sale of data.

1. Controller

Nikolaj Andersen, Burkal Kirkevej 46, 6372 Bylderup-Bov, Denmark, CVR no. 46709438
E-mail: hello@rolekite.com

2. What we process and why

Your account

Your e-mail address and password, to run your account and sign you in. We store the password only as a cryptographic hash, never in plain text. Legal basis: contract (Art. 6(1)(b) GDPR).

Your search

Your positions (job titles), your place with coordinates, your radius, your remote and part-time preferences and the jobs you save on your saved-jobs list. We use them to find new ads, to filter your list of results and to show your saved jobs. When searching the sources, we use the job titles of all users together and without reference to any person. We determine places from a local place database; no request is sent to an external service for this. Legal basis: contract (Art. 6(1)(b) GDPR).

Your applications

If you track applications, we store for each one a copy of the job (title, company, place, link), its stage and history, your notes, your next appointment, an ad text you paste and the files you upload (for example assignments or your CV), up to 100 MB per account. For ads you applied to, we fetch and keep the ad text once so that it stays readable after the ad goes offline; this request carries no information about you. Such ads are not deleted while your application exists. Companies you hide after a rejection are stored with your account and left out of your job list and job e-mails. Files are only accessible to you. Everything is deleted when you delete the application or your account. Legal basis: contract (Art. 6(1)(b) GDPR).

Cookies

After you sign in, we set a cookie (jobsearch_session). It contains a random, signed session ID and keeps you signed in on this device until you sign out, change your password or delete your account. On our server we store only a hash of this ID together with your account. If you choose a language with the language switcher, we remember your choice for one year in a second cookie (lang). After some actions, such as saving your search, a third cookie (flash) holds a status message for at most one minute and is deleted when the next page shows it. These cookies are strictly necessary for a service you requested, so no consent is required (section 4 of the Danish cookie order). We use no other cookies and no analytics or advertising tools.

Server logs

When you visit the website, our server automatically stores the IP address, time, requested address, status code and browser identification. We need this data for secure operation and troubleshooting. The logs are overwritten continuously once they reach 10 MB, usually after a few days. Legal basis: legitimate interest in secure operation (Art. 6(1)(f) GDPR).

Error monitoring

If a technical error occurs, we report it to the service Honeybadger. The report contains only the affected part of the program, the request method and the page, but no names, e-mail addresses, credentials or IP addresses. Legal basis: legitimate interest in error-free operation (Art. 6(1)(f) GDPR).

Bot protection

To protect sign-in and registration from automated attacks, these two pages use the service Cloudflare Turnstile. When the page loads, your browser runs a short check in the background that you do not see. Cloudflare receives your IP address, your browser identification and technical characteristics of your browser and device, but not what you type into the form; we only receive the result of the check. Cloudflare also uses this data under its own responsibility to improve its bot detection, see the Turnstile Privacy Addendum. Legal basis: legitimate interest in protecting accounts and the service from abuse (Art. 6(1)(f) GDPR).

E-mails

If you write to us, we process your message and contact details to reply. E-mails we send you about your account are sent through the service Resend. If you turn on the daily e-mail, we store this choice, your language and the time of the last e-mail, and each morning we send you the new ads for your search through Resend. Every e-mail contains a link to unsubscribe immediately. If an e-mail cannot be delivered permanently or you mark it as spam, Resend tells us and we turn the daily e-mail off. Legal basis: contract or legitimate interest in answering your request (Art. 6(1)(b) and (f) GDPR).

Subscription and payment

If you subscribe, the payment service Stripe processes your payment details (card, billing address) directly; we never see or store your card number. We store your Stripe customer and subscription IDs, the status and end of the current period, and whether you already used your trial; a friend code you enter at checkout is stored at Stripe with your subscription. We need this to give you access and to bill you. Invoices and payment records are kept for 5 years after the end of the financial year, as the Danish Bookkeeping Act requires. Legal basis: contract and legal obligation (Art. 6(1)(b) and (c) GDPR).

Personal data in job ads

Job ads come from public job portals and from employers' career pages. Some contain names and contact details of contact persons. We take them over as the source publishes them, so that applicants see the complete ad. We hide expired ads and delete them 60 days after they expired, unless a user saved them in their list; saved ads are deleted once no user keeps them any more. Legal basis: legitimate interest in a complete job search (Art. 6(1)(f) GDPR). To sort ads by work mode, part-time and required languages, a language model reads the ad text through OpenCode (Anomaly, USA) or OpenRouter (OpenRouter, Inc., USA), only at providers that neither store nor train on it; no user data is sent. If you are named in an ad, you can object at any time; please write to hello@rolekite.com.

3. Recipients and service providers

We do not sell data and do not pass it on for advertising. The following service providers process data on our behalf:

Where data is transferred to the USA, this is based on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses (Art. 45 and 46 GDPR).

4. Retention

We keep account and search data until you delete your account. You can do this yourself at any time under Account; your account, positions and search are then deleted immediately. Alternatively, an e-mail to hello@rolekite.com is enough; we then delete within 30 days. Invoices and payment records are kept as described above even after you delete your account; a running subscription ends when you delete your account. Server logs are overwritten continuously as described above. Backups are overwritten after 90 days at the latest.

5. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interest (Art. 15 to 21 GDPR). To exercise them, write to hello@rolekite.com.

You can also lodge a complaint with a data protection authority, for example the Danish authority: Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, Denmark, datatilsynet.dk.

6. Automated decisions

Which ads you see depends only on your job titles, your place and your remote and part-time preferences. There is no profiling and no automated decision with legal effect within the meaning of Art. 22 GDPR.

7. Changes

When Rolekite changes, we update this policy. The date at the top shows the current version.