ScoreMyOffers

Privacy policy

Under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR). Version of 23/10/2026. This is a translation; the Italian version prevails.

Who processes your data

The controller is DARIO GAETANO SCIORTINO. For any request: [email protected]. No data protection officer is appointed, as the activities carried out do not require one (Art. 37 GDPR).

What data

  • Account: e-mail address, password (stored only as an Argon2id hash, never in clear), language, date and version of the Terms you accepted, marketing consent (with date).
  • Use of the service: search profiles, searches, words, exclusions and rules, decisions on offers, notes, reports of wrong data, files you choose to import (for example a JobsScraper export).
  • Security: IP address and browser type of sign-ins and important actions (password change, consents), recognised devices; a cryptographic fingerprint of the e-mail address so the free trial is given only once.
  • Payments: handled by Stripe. We only receive the outcome, amount, date and Stripe identifiers, never card details.
  • Telegram, if you link it: the chat identifier and the username.
  • Visit statistics, without cookies: we count pages viewed and where visits come from (the link or the referring site), as daily totals only. To count unique visitors we use a fingerprint of IP address and browser mixed with a key that changes every day: it cannot lead back to the IP or recognise you from one day to the next.

Job offers come from adverts that companies publish publicly. We keep title, company, location, date, link and the facts we extract (pay, work mode, list of words), not the text. If an advert contains personal data (for example a recruiter's name) we neither show nor use it: it can only end up in the internal list of words, which is used to compute the score and is deleted after 90 days in which the advert does not reappear.

Why, and on what basis

  • Providing the service you asked for, including the free trial and payments: performance of the contract (Art. 6(1)(b)).
  • Protecting accounts and the service from abuse (attempt limits, new sign-in alerts, one free trial per address, security logs) and proving the consents received: legitimate interest (Art. 6(1)(f)). You can object by writing to us (Art. 21).
  • Understanding how the service is used, to improve it (aggregate visit statistics): legitimate interest (Art. 6(1)(f)).
  • Tax and accounting obligations on payments: legal obligation (Art. 6(1)(c)).
  • News and tips by e-mail, only if you asked for them: consent (Art. 6(1)(a)), which you can withdraw any time from the Account page or the link in every e-mail.

Automated decisions. Offer scores and automatic archiving follow only the words and rules you choose, and serve to sort adverts for you: they are not decisions producing legal or similarly significant effects on you (Art. 22).

For how long

  • As long as you have the account. If you don't use it for 365 days and have no active pass, subscription or booking, we warn you and delete it 30 days later.
  • Sign-ups never confirmed are deleted after 7 days.
  • Security logs are deleted after 12 months; sent e-mails (which contain sign-in links) after 7 days.
  • The text of an advert read again to check one of your reports is deleted within 60 days. Reports describe an advert, not you: if you delete your account they stay, no longer linked to you.
  • Backups: encrypted copies of the database, kept at most 30 days. Deleted data may remain in these copies until they expire; they are only used to restore the service after a failure.
  • For payments we keep date, amount and Stripe identifiers for as long as tax law requires, even after the account is deleted, detached from the rest of your data. Stripe keeps its own data for the periods the law requires.
  • The server's technical logs, which contain IP addresses, overwrite themselves within a few days.
  • The fingerprints used to count unique visitors are deleted after 48 hours; only daily totals stay, which concern no one in particular.

Who we entrust it to

Only providers we need to run the service, appointed as processors (Art. 28):

  • the server provider and the provider of the encrypted backup storage (in the European Union);
  • Cloudflare, to protect and serve the site;
  • the e-mail delivery provider.

Stripe processes payment data as an independent controller for its own obligations (anti-money-laundering, fraud) and as a processor otherwise. Telegram, if you choose to use it, is a service you use directly: messages go through its servers under its own policy. Some of these providers may process data outside the European Union: such transfers rely on the safeguards of Arts. 45–46 GDPR (EU-US Data Privacy Framework adequacy decision or standard contractual clauses). We do not sell or hand over data to anyone, and we run no advertising.

Your rights

You can access your data, correct it, erase it, restrict or object to its processing and receive it in a machine-readable format (Arts. 15–22). The most common ones you do yourself on the Account page: download all your data (in a format that can be imported again) and delete your account. For the rest, write to us: we answer within a month. You also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali, or the authority where you live.

Security

Encrypted connections, passwords stored only as hashes, two-step verification available, secrets encrypted in the database, encrypted backups, limited and logged access. Should a breach affecting your data occur that is likely to result in a high risk, we will tell you without undue delay (Art. 34).

Minors

The service is only for people aged 18 or over.

Cookies

We only use technical cookies needed for the site to work: see the cookie page.

Changes

If we change this policy materially, we will tell you by e-mail or on the site before the changes take effect.

If the service passes to another provider (see the Terms), the data needed to keep providing it passes to them, and they become the new controller: we tell you beforehand, and until then you can download it or delete your account.