Rolekite
Sign in Register

Privacy policy

Last updated: 19 October 2026

This page explains which personal data Rolekite processes, why, and which rights you have. In short: we only store what we need to show you matching jobs. There is no advertising, no tracking by third parties and no sale of data.

1. Controller

Nikolaj Andersen, Burkal Kirkevej 46, 6372 Bylderup-Bov, Denmark, CVR no. 46709438
E-mail: hello@rolekite.com

2. What we process and why

Your account

Your e-mail address and password, to run your account and sign you in. We store the password only as a cryptographic hash, never in plain text. We also store the language you register in, so that e-mails about your account (welcome, password reset) reach you in it; a reset link is valid for 30 minutes. If you change your e-mail address, we send a confirmation link valid for 30 minutes to the new address and tell the previous address about the change. Legal basis: contract (Art. 6(1)(b) GDPR).

When you register, you can tell us how you heard about Rolekite; the answer is voluntary. We store it with your account and look at it only as a count per answer, to see which channels bring new users. It is deleted with your account. Legal basis: legitimate interest in knowing which channels work (Art. 6(1)(f) GDPR).

Your searches

Your saved searches (each a job title with a place and its coordinates, a radius, remote and part-time preferences, whether to stay within the place's country, and words a title must or must not contain) and the jobs you save on your saved-jobs list. We use them to find new ads, to filter your list of results and to show your saved jobs. When searching the sources, we use the job titles of all users together and without reference to any person. We also use the area of every search (its place rounded to about one kilometre, the radius, and whether it stays within the country or includes remote jobs), likewise without reference to any person: to search near the users first, to search only the sources of the countries concerned, and to store only the jobs a search would list. When you click “Search”, we keep the job title you searched, with its place, radius and these two preferences, for 30 minutes, so that Rolekite searches every source for it at once; the crawler receives these titles and areas in the same way, without reference to any person. We also keep each of these searches (job title, place, radius, the two preferences, whether it is one of your saved searches, and the time) with your account for 30 days, to see how Rolekite is used and to recognise misuse; only the operator of Rolekite sees them, and they are deleted after 30 days or together with your account. Legal basis for this log: legitimate interest in running the service securely and improving it (Art. 6(1)(f) GDPR). To find sources that are missing, Rolekite counts after each search how many jobs it holds for a searched job title in its rounded area and keeps that count with the title and area for 90 days, without reference to any person. We determine places from a local place database; no request is sent to an external service for this. Legal basis: contract (Art. 6(1)(b) GDPR).

Your applications

If you track applications, we store for each one a copy of the job (title, company, place, link), its stage and history, your notes, your next appointment, an ad text you paste and the files you upload (for example assignments or your CV), up to 100 MB per account. For ads you applied to, we fetch and keep the ad text once so that it stays readable after the ad goes offline; this request carries no information about you. Such ads are not deleted while your application exists. Companies you hide after a rejection are stored with your account and left out of your job list and job e-mails. Files are only accessible to you. Everything is deleted when you delete the application or your account. Legal basis: contract (Art. 6(1)(b) GDPR).

Cookies

After you sign in, we set a cookie (jobsearch_session). It contains a random, signed session ID and keeps you signed in on this device until you sign out, change your password or delete your account. On our server we store only a hash of this ID together with your account. If you choose a language with the language switcher, we remember your choice for one year in a second cookie (lang). After some actions, such as saving your search, a third cookie (flash) holds a status message for at most one minute and is deleted when the next page shows it. If you close a tip in the job search, a fourth cookie (coach) remembers this for one year so the tip does not come back. These cookies are strictly necessary for a service you requested, so no consent is required (section 4 of the Danish cookie order). We use no other cookies and no advertising tools; our visit statistics work without cookies (see below).

Server logs

When you visit the website, our server automatically stores the IP address, time, requested address, status code and browser identification. We need this data for secure operation and troubleshooting. The logs are overwritten continuously once they reach 10 MB, usually after a few days. Legal basis: legitimate interest in secure operation (Art. 6(1)(f) GDPR).

Visit statistics

On our public pages (start page, prices, job and comparison pages, legal pages) and on the registration page, we count visits with Umami, an open-source statistics tool that we run on our own server; no data goes to the makers of Umami or to other third parties. Umami records the page address (of its parameters only campaign parameters such as utm_source), the page title, the website you came from (only its domain), browser, operating system, device type, screen size, language and the approximate location (country, region, city) it derives from your IP address. From your IP address and browser identification Umami calculates a pseudonymous visitor ID (a hash value); Umami does not store the IP address itself. Umami sets no cookies, stores nothing on your device and does not measure the pages behind the sign-in. If your browser sends a “Do Not Track” signal, nothing is counted. We look at the data only as totals, to see which pages and channels bring visitors, and delete it after 90 days. Legal basis: legitimate interest in understanding and improving our website (Art. 6(1)(f) GDPR).

Error monitoring

If a technical error occurs, we report it to the service Honeybadger. The report contains only the affected part of the program, the request method and the page, but no names, e-mail addresses, credentials or IP addresses. Legal basis: legitimate interest in error-free operation (Art. 6(1)(f) GDPR).

Bot protection

To protect sign-in and registration from automated attacks, these two pages use the service Cloudflare Turnstile. When the page loads, your browser runs a short check in the background that you do not see. Cloudflare receives your IP address, your browser identification and technical characteristics of your browser and device, but not what you type into the form; we only receive the result of the check. Cloudflare also uses this data under its own responsibility to improve its bot detection, see the Turnstile Privacy Addendum. Legal basis: legitimate interest in protecting accounts and the service from abuse (Art. 6(1)(f) GDPR).

E-mails

If you write to us, we process your message and contact details to reply. E-mails we send you about your account are sent through the service Resend. If you turn on the daily e-mail, we store this choice, your language and the time of the last e-mail, and each morning we send you the new ads for your search through Resend. Every e-mail contains a link to unsubscribe immediately. If an e-mail cannot be delivered permanently or you mark it as spam, Resend tells us and we turn the daily e-mail off. Legal basis: contract or legitimate interest in answering your request (Art. 6(1)(b) and (f) GDPR).

Subscription and payment

If you subscribe, the payment service Stripe processes your payment details (card, billing address) directly; we never see or store your card number. We store your Stripe customer and subscription IDs, the status and end of the current period, and whether you already used your trial; a friend code you enter at checkout is stored at Stripe with your subscription. We need this to give you access and to bill you. Invoices and payment records are kept for 5 years after the end of the financial year, as the Danish Bookkeeping Act requires. Legal basis: contract and legal obligation (Art. 6(1)(b) and (c) GDPR).

If we give your account access to additional job sources, we store this setting with your account until you delete it. Legal basis: contract (Art. 6(1)(b) GDPR).

Personal data in job ads

Job ads come from public job portals and from employers' career pages. Some contain names and contact details of contact persons. Rolekite stores and shows only an ad's title, employer, place and date and links to the original; we do not show ad texts. We hide expired ads and delete them 60 days after they expired, unless a user saved them in their list; saved ads are deleted once no user keeps them any more. Legal basis: legitimate interest in a complete job search (Art. 6(1)(f) GDPR). To sort ads by work mode, workplace, part-time and required languages, a language model reads the ad text once through OpenRouter (OpenRouter, Inc., USA), only at providers that neither store nor train on it; no user data is sent. We keep only the facts it finds and a short quote as evidence and delete the text after at most three days. If you are named in an ad, you can object at any time; please write to hello@rolekite.com.

3. Recipients and service providers

We do not sell data and do not pass it on for advertising. The following service providers process data on our behalf:

Where data is transferred to the USA, this is based on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses (Art. 45 and 46 GDPR).

4. Retention

We keep account and search data until you delete your account; the log of your searches is deleted after 30 days. You can do this yourself at any time under Account; your account, positions and search are then deleted immediately. Alternatively, an e-mail to hello@rolekite.com is enough; we then delete within 30 days. Invoices and payment records are kept as described above even after you delete your account; a running subscription ends when you delete your account. Server logs are overwritten continuously as described above. Backups are overwritten after 90 days at the latest. Visit statistics are deleted after 90 days.

5. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interest (Art. 15 to 21 GDPR). To exercise them, write to hello@rolekite.com.

You can also lodge a complaint with a data protection authority, for example the Danish authority: Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, Denmark, datatilsynet.dk.

6. Automated decisions

Which ads you see depends only on your job titles, your place and your remote and part-time preferences. There is no profiling and no automated decision with legal effect within the meaning of Art. 22 GDPR.

7. Changes

When Rolekite changes, we update this policy. The date at the top shows the current version.