Privacy Policy

Last updated: July 2026

1. Data controller

The controller of your personal data is:

Bogdan Banasiak

ul. 1 Maja 10/II/1, 68-200 Żary, Poland

NIP: 9282118070

2. Overview

OfferKeep ("we", "us", "our") provides a job offer tracking tool available at offerkeep.app. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

3. Data we collect

Unauthenticated users: All offer data is stored exclusively in your browser's local storage (IndexedDB). We do not receive, store, or process this data on our servers.
Registered users: When you create an account, we collect your email address and store your offer data on our servers to enable sync and backup features.
Moving local offers to your account: The first time you sign in, offers you saved in this browser before registering are uploaded to your account so they sync across your devices. If you have more offers than your plan allows, the newest ones are moved up to that limit and the rest stay saved in this browser and become visible again after you log out on this device.
Premium subscribers: Payment is handled entirely by Lemon Squeezy (our Merchant of Record). We receive only your email address and a subscription status confirmation. We never see or store your card details.
Server logs (technical data): When you access the Service, our servers automatically record standard technical data including IP address, browser type, pages visited, and date/time of access. This data is used solely for security, stability, and abuse prevention purposes and is not linked to your account profile.
Essential cookies: We use cookies required for authentication and session management. These are set regardless of your cookie preference.
Analytics cookies (with consent only): If you accept cookies, we use Google Analytics 4 to collect anonymised usage data: pages visited, session duration, device type, and country. Your IP address is anonymised by Google before storage. We do not send any personally identifiable information to Google Analytics.
Advertising (Google AdSense): Users on free plans see ads. Consent for advertising cookies is collected separately through Google's certified consent message, shown to visitors from the EEA, UK and Switzerland. If you do not consent, only limited, non-personalised ads are shown, without advertising cookies. Premium subscribers see no ads.
Marketing emails (with consent only): If you ticked the optional marketing checkbox at signup, we use your email address to send occasional product news, new features and tips. You can withdraw this consent at any time by contacting us or using the unsubscribe link included in every such email.

4. Legal basis for processing (GDPR)

Performance of a contract (Art. 6(1)(b) GDPR): processing your email address and offer data to provide the Service you signed up for.
Consent (Art. 6(1)(a) GDPR): loading analytics cookies only after you have accepted via the cookie banner, serving personalised ads only after you consent via Google's consent message, and sending marketing emails only if you opted in at signup. You may withdraw any of these consents at any time: analytics via "Cookie settings" in the footer, ads via the "Privacy" options in the ad message, marketing via the unsubscribe link or by contacting us.
Legal obligation (Art. 6(1)(c) GDPR): retaining billing records for the period required by Polish tax law.
Legitimate interest (Art. 6(1)(f) GDPR): processing server logs for security, stability, and abuse prevention.

5. How we use your data

To provide and improve the OfferKeep service.
To send transactional emails (e.g. email verification, password reset) when you have an account.
To send product news and tips by email, only if you gave marketing consent at signup.
We do not sell, rent, or share your personal data with third parties for marketing purposes.

6. Data retention

Account and offer data: retained for as long as your account is active. You can delete your account and all associated data (including offers and uploaded images) at any time from the account settings page. Deletion is permanent and takes effect immediately.
Billing records: retained for 5 years after the transaction date as required by Polish tax law (Art. 74 of the Accounting Act).
Analytics data: retained for 14 months in Google Analytics, after which it is automatically deleted.
Local (unauthenticated) data: stored only in your browser and can be cleared through your browser's storage settings.

7. Third-party services

Supabase: authentication and database hosting. Data is processed in accordance with their Privacy Policy.
Cloudflare: hosting of the application and storage of images you attach to your offers (Cloudflare R2). See their Privacy Policy.
Google Cloud Platform: hosting of our API backend (region europe-west1, Belgium). The technical server logs described above are processed on this infrastructure within the EEA. See the Google Cloud Privacy Notice.
Lemon Squeezy: payment processing and subscription management. Lemon Squeezy acts as the Merchant of Record for all Premium purchases, meaning they are the seller of record and responsible for payment data. See their Privacy Policy.
Google AdSense: ad serving for users on free plans. Consent for advertising cookies is collected through Google's certified consent message. Without consent, only limited non-personalised ads are shown. See Google's Advertising Policy.
Google Analytics 4: only loaded with your explicit cookie consent. Google acts as a data processor under a Data Processing Agreement with OfferKeep. Data is retained for 14 months. You can opt out at any time by declining cookies or using the Google Analytics Opt-out Browser Add-on. See Google's Privacy Policy.
Resend: delivery of transactional emails (account confirmation, password reset and similar messages). Resend processes your email address solely to deliver these messages. See their Privacy Policy.
Sentry: application error monitoring. When a technical error occurs, Sentry (Functional Software, Inc.) receives technical details such as the browser type and the page on which the error happened. We configure Sentry not to collect personal identifiers. See their Privacy Policy.
OpenStreetMap / Nominatim: used for address geocoding when you enter a home location in your profile. Address queries are proxied through our server to the Nominatim API; no personally identifiable information beyond the address string is transmitted. See OSM Privacy Policy.

8. International data transfers

Some of our third-party service providers are based outside the European Economic Area (EEA) or process data on servers located outside the EEA (including in the United States). When your data is transferred outside the EEA, we ensure it is protected by appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission, or the EU–US Data Privacy Framework where applicable. Specifically: Supabase processes data in accordance with SCCs; Lemon Squeezy and Google LLC participate in the EU–US Data Privacy Framework; Resend and Sentry safeguard transfers through SCCs or the EU–US Data Privacy Framework, as described in their privacy policies. You may request a copy of the applicable safeguards by contacting us at contact@offerkeep.app.

9. Your rights (GDPR)

If you are located in the European Union, you have the following rights under the GDPR:

Right to access the personal data we hold about you.
Right to rectification of inaccurate data.
Right to erasure ("right to be forgotten").
Right to data portability.
Right to object to or restrict processing.
Right to withdraw consent at any time (where processing is based on consent).

To exercise any of these rights, contact us at contact@offerkeep.app. You also have the right to lodge a complaint with the Polish supervisory authority (UODO, uodo.gov.pl).

10. California residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights, including the right to know what personal information we collect, the right to delete it, and the right to opt out of its sale. We do not sell personal information. To exercise your rights, contact us at contact@offerkeep.app.

11. Binding language

The Polish version of this Privacy Policy is the legally binding version, as OfferKeep is operated by a sole proprietor registered in Poland under Polish law. The English version is provided for convenience only. In the event of any conflict or discrepancy between versions, the Polish version shall prevail.

12. Contact

Questions about this policy? Reach us at contact@offerkeep.app.