How we protect you

What visitors and employers can see

A review shows the role you applied for, your ratings, and what happened at each interview step. It also shows:

• A rough age. “This week”, “this month”, “1–3 months ago” and so on. Never the exact date or time.
• A verified-employee mark, only when it is safe. It appears once at least five people at that company have verified. Below that number a single badge could point at one person, so we hide it.

We never show your name, email address, account ID or profile picture. Our public pages and our API do not return them at all, so they cannot leak by accident.

What we keep about you

Your account has an email address and a password stored only as a one-way hash. We keep a link between your account and the reviews you wrote so we can moderate, stop duplicates and let you manage your own reviews. That link is never shown publicly.

Checking someone worked somewhere, without keeping their email

If you choose to verify that you work at a company, we send a six-digit code to your work email. The code expires after 15 minutes and locks after five wrong attempts. We store a keyed hash of the address and a hash of the code, not the address itself. The same work email cannot be used to verify a second account.

Evidence you upload

Uploading evidence is optional. When you do:

• We work out the file type from its contents, not its name, and reject executables.
• Photos are re-saved without their hidden metadata, including location. PDFs lose their author and software fields.
• Emails are reduced to the message body. Sender, recipient, subject, date and routing headers are dropped.
• Your original filename is discarded, because filenames often contain real names.

Today, evidence is stored privately and is not shown on the page. Screening it, and any “evidence verified” mark, are still being built. A person will always make the final call on that mark; none is given automatically.

People check reviews before they appear

New reviews wait in a moderation queue and are checked by a person before they are published. We also weigh reviews by how detailed they are and how the community rates their helpfulness, so one angry post cannot sink a company’s score.

Where anonymity stops

We can protect your identity in our system. We cannot control what you write. If a review says “the interviewer on 3 March who mentioned his sister”, the company may know who you are from the details alone. Leave out names, dates and anything only you would know. If you are one of very few applicants, be extra careful.

What we don’t do

• We don’t sell personal data.
• We don’t run advertising or third-party analytics trackers.
• We don’t let companies pay to remove, hide or reorder reviews.

Something looks wrong?

If you think a review identifies you, is untrue, or should not be public, write to mawaz@pyxion.uk. More detail is in our privacy policy and terms of use.