Privacy

The short version

Tree House Jobs is a local job board. We collect what is needed to run it: an account so you can sign in, a resume if you choose to publish one, and a job post if you are hiring. We do not sell any of it, and we do not track you around the internet.

You can see everything we hold about you from your own account pages, change it there, and delete it there.

What we collect when you make an account

Your name, email address, ZIP code, and a password. The password is stored only as a scrypt hash — we cannot read it, and nobody here can tell you what it is.

A phone number, if you give us one. It is optional.

The date you registered, the date you last signed in, and whether you have confirmed your email address.

What we collect if you publish a resume

Only what you type into it, and only if you choose to make it searchable. A resume set to private is not shown to anyone at all.

Making it searchable does not make it public. It is shown only to signed-in business accounts we have verified as real employers, one at a time, in response to a search. It is not on the open web, it is not in any search engine, and it is not sold or supplied in bulk to anybody.

Every employer who opens your resume is recorded, and you can see that list on your own resume page.

That can include your contact details, postal address, work history, education, skills, and how you would rather be contacted. It can also include a photo and a short video if you upload them.

You choose what goes in. None of it is required beyond a name and one way to reach you — and messages on Tree House Jobs count as that one way, so you can publish a resume without putting an email address, a phone number or a street in front of every employer who looks at it.

What we collect if you are hiring

Your business name, description, contact details, service area, and the content of the jobs you post — including any photo or video you attach.

Job posts and business listings are public by design. That is the point of publishing them.

What happens when you apply for a job

The employer receives your name, your email address, anything you write in your note, and a copy of your resume as it stood when you applied.

Employers can add private notes about applicants. You cannot see those, and neither can other employers.

Applying to one employer does not share anything with any other employer.

Photos and video

Photos and video are stored with Cloudflare, not on this site's own servers. They are delivered from Cloudflare when someone views your listing.

Deleting a job post or a resume deletes its photos and video with it. Closing a post keeps them, so that reopening it does not mean uploading everything again.

Payments

Payments for employer memberships are handled entirely by Stripe. Your card number never reaches this site and we never see it.

We keep a record of what was bought and when it runs out, so we know whether a membership is current.

Email

We send email for things you have asked for or need to know: confirming your address, telling you a job post or resume is about to expire, and account matters.

Email is sent through Resend, which handles delivery on our behalf.

We do not send marketing email and we do not give your address to anyone who does.

Cookies

One cookie, and only once you sign in. It holds a signed session token so the site knows it is still you between pages. It cannot be read by JavaScript, it is sent only over HTTPS in production, and it expires.

There are no advertising cookies, no third-party trackers, and no analytics scripts on this site.

Visit counting

We count how many people look at the home page, and which fields of work get opened most, so we know whether the site is useful and what people are looking for.

This is done without a cookie. A visitor is recorded as a one-way hash of their network address and browser, combined with a secret this site holds. The result cannot be turned back into an address, it is not linked to your account, and it is not shared with anyone.

The fields-of-work count is a plain tally. It records that a field was opened, not who opened it.

Imported job listings

Some listings on this site come from public job feeds — USAJOBS, run by the federal government, and Adzuna, a job search service. They are marked with where they came from.

You do not apply to those through this site. The apply link takes you to the original posting, and what happens after that is covered by that site's own privacy policy, not this one.

When you write to us

The contact form asks for your name, your email address and whatever you write. We keep the message so it cannot be lost, and we send a copy to ourselves so we notice it.

If you are signed in when you write, we record which account it came from, so we can look into an account problem without asking you to prove who you are.

We use your address to reply and for nothing else. It does not go on a mailing list.

Who else can see your information

Companies that help run the site, and only for that purpose: Upstash stores the data, Cloudflare stores photos and video, Stripe handles payments, Resend sends email, and Vercel runs the site itself.

Employers you apply to. Applying hands that employer your resume as it stands, and they keep it.

A resume you choose to make searchable is visible only to signed-in employers authorized to access the Resume Board. It is not made publicly searchable on the internet or indexed by public search engines.

Anyone, for the things that are genuinely public — a job post and a business listing. Those are meant to be found, and search engines index them.

We do not sell personal information, and we do not share it for anyone else's advertising.

How long we keep it

Job posts and resumes run on a clock and expire on their own. Renewing one restarts it.

Your account and its content stay until you delete them.

Deleting an account removes the account, its resume, its job posts, and the photos and video that belong to them.

Applications you have already sent stay with the employer who received them, because they are a record of something that happened between the two of you.

What you can do

See and change everything on your account: your details, your resume, your job posts.

Make a resume private again at any time, which takes it out of employer search immediately.

See which employers have opened your resume, on the resume page itself.

Delete your account and its content.

Ask us anything about what we hold about you, and we will answer.

Security

Passwords are hashed with scrypt and compared in constant time. Sessions are signed. Administrative access is separate from ordinary accounts and rate limited.

No site can promise it will never be breached. What we can promise is that we do not collect more than we need, which is the only protection that always holds.

Children

This site is not intended for children under 13, and we do not knowingly collect information from them. If you believe a child has given us information, tell us and we will remove it.

Changes

If this policy changes in a way that affects what we collect or who sees it, we will update the date at the top and say what changed.

Contact

Questions about privacy, or a request about your own information, can go to the address on our contact page and we will respond.