Privacy Notice

Here is how Forward Deployed Careers ("we", "us") handles information about visitors to forwarddeployed.careers (the "Site").

What we collect

• Request data. Like any website, the Site is delivered and secured by a hosting provider that processes standard request data: IP address, browser type, the page requested and the referring address.
• Approximate location. From your connection, our hosting provider gives our server a country, region and city. We keep that approximate location and never your IP address.
• First-party analytics. We wrote the small script that runs on each page, and it reports to our own server alone. It records the pages you view and their address (campaign tags such as utm_source included), the page that sent you here, your screen and window size, how far you scroll and how long the page stays in view, whether a recommendation comes into view, and the links and buttons you click, with their text, their address and where you clicked. Nothing in it comes from another company; it sets no cookies of its own and keeps nothing in your browser.
• Browser and device type. Our server works out the browser and its version, the operating system and whether you use a desktop, mobile or tablet from the user agent your browser sends, and records only those, not the user agent.

The visitor cookie

There is one cookie, and it is first-party: our server sets it on forwarddeployed.careers. Inside are a random visitor ID, a count of your visits, the time of your last visit and a check code that proves our server issued it. We use it to count visits and to tell returning visitors from new ones. Scripts on the page cannot read it, it travels only to this Site and only over secure connections, and it lapses 400 days after your last visit. Your browser settings let you delete it at any time.

Writing to us

The contact page asks for your email address and your message, and for your name only if you want to give it. Along with those, our server records the approximate country your connection appears to come from, as our hosting provider reports it. Your IP address and user agent are not stored with the message.

Your message is used for one thing: replying to you. It is stored with a database service provider in the United States and deleted after 12 months at the latest. It is never used for marketing, and the only others who handle it are the service providers that host and store it for us.

To have a message deleted before then, ask us through the same contact page and say which email address you wrote from.

Device key

With each event our server computes a device key: a keyed one-way hash (HMAC-SHA256) of your IP address and user agent, shortened to 32 characters. The same browser on the same connection gives the same key, so it can link visits that probably come from one device, on this Site and on other websites that share our analytics. The key cannot be turned back into your IP address or user agent, and neither of those is stored or sent to our analytics provider. Many people can share one connection, for example in an office or on a mobile network, so the key is an approximate signal, not an identity.

Who processes analytics

The events described here go from our server to PostHog, Inc., our analytics processor, together with the visitor ID, the device key and the approximate location. PostHog stores and processes them for us in the United States. Your IP address, user agent, name and email address are never sent to it.

Our analytics account is shared with a company we have a business connection with, which uses it for its own website, so that company can see the events described above. Funding and recommendations names it.

Following a link to a company we recommend

A link in an article to a company we recommend would first reach an address on this Site. Our server records the click, meaning the page, the link's place on it and which of the company's pages it leads to, then forwards you to that company's website. The forwarding address includes a one-time click ID, your visitor ID, this Site's name, the page you came from and a signature showing the link came from this Site, which lets that company connect your visit there with your visits here. When the rules under Choices and rights apply to you, no visitor ID is included. Funding and recommendations names the company and explains the connection.

Choices and rights

• Global Privacy Control. If your browser sends a Global Privacy Control signal, we honor it: we set no cookie and remove one set earlier, compute no device key, pass no visitor ID in links to a company we recommend, and record your page views only under an anonymous ID that changes every day and differs from site to site, so we do not follow you across visits.
• Visitors from Europe, the UK and Switzerland. If your connection appears to come from the European Union, the European Economic Area, the United Kingdom or Switzerland, or we cannot tell where it comes from, the same rules apply automatically.
• Your rights. Where you live may give you rights under laws such as the GDPR or the California Consumer Privacy Act, including access, correction and deletion.

Sharing

We do not sell personal information. Our hosting provider processes request data and our analytics provider processes analytics events, both on our behalf as described above. We disclose information when the law requires it. Our database provider likewise stores messages sent through the contact form on our behalf.

Children

The Site is meant for adults, and we do not knowingly collect information from children under 13.

Contact us

To ask about your privacy or to have a message you sent us deleted, write to us through the contact form.