Privacy Policy

Draft, last updated October 2026.

BlueTeamJobs is a job board for defensive security roles. We collect as little as we can. We do not use advertising or tracking cookies, we do not sell data, and job seekers never need an account: every apply button goes to the employer's own site.

Who we are

BlueTeamJobs is run by Sam. Questions about this policy go through thecontact form.

If you browse the site

• Our host, Cloudflare, processes your IP address and browser details to deliver pages and protect the site from abuse. We keep request logs for debugging for a limited time and never log email addresses or form contents.
• We count job page views per job per day. The count stores no IP address, cookie or identifier.
• If you choose a light or dark theme, a theme cookie remembers it for a year. It holds only that choice.

If you subscribe to the newsletter

Your email address goes straight to Beehiiv, our newsletter provider, with the page you signed up on. We keep no copy. Every email has an unsubscribe link. Cloudflare Turnstile checks that a person submitted the form.

If you contact us

Your name, email address and message are sent to our inbox by email (through Resend) so we can reply. They are not stored in the site's database.

If you post a job

• We keep your email address, your company details and the jobs you post, so you can sign in and manage them. Sign-in uses a one-time email link; a session cookie keeps you signed in for up to 30 days.
• Payments are handled by Stripe. We receive the payment status and amount, never your card details.
• Emails about your posts (sign-in links, receipts, expiry reminders) are sent through Resend.
• Published jobs are public and are sent to Google's Indexing API so they appear in Google search.

Cookies

We set only cookies the site needs: __Host-csrf protects forms against cross-site attacks, the session cookie keeps employers signed in, and theme remembers your theme choice. None of them track you, so we do not show a cookie banner.

Processors

Cloudflare (hosting, security, database), Resend (email), Stripe (payments), Beehiiv (newsletter) and Google (search indexing of public job URLs).

How long we keep data

• Sign-in links and expired sessions: deleted within a day of expiring.
• Abuse-prevention counters (hashed, no raw IPs or emails): deleted after a day.
• Employer accounts and posts: while the account exists. Ask us through the contact formto close your account and we will delete your email address, company details and posts within 30 days. We keep payment records for as long as tax law requires.

Your rights

You can ask for a copy of your data, a correction, or deletion through the contact form.