Privacy
JobHunter is being built. This page describes it as it is today and will be updated, before each change ships, as features arrive. Vibistic never receives what you enter in readable form.
What JobHunter keeps, and where
Everything is kept in this browser's own storage (IndexedDB), on this device only: the companies you follow, your role types and filters, their openings, your marks on them (seen, saved, applied, hidden, notes) and, only when you press Save, your profile, resume text and saved answers. A resume PDF you pick is read in your browser and not kept: only the text you then save. Nothing of it is sent to Vibistic. Your theme choice is a cookie shared by the Vibistic sites. Clearing this site's data in your browser deletes it all.
Moving from Shortlist
This app was called Shortlist, at shortlist.vibistic.com. Your browser keeps its data per address, so what you saved there stays there until you move it. Moving hands it directly from that page to this one, in your browser, and asks you first. Vibistic does not see it. Your AI key stays behind, so add it again if you use one. The old copy stays until you remove it with Delete everything at the old address.
AI requests, only if you choose
With your own AI key (Anthropic, Google, OpenRouter, xAI or Z.ai), the apply kit can check how your resume fits an opening, draft a cover letter or draft an answer. The key stays in this browser (this tab only, unless you tick Remember) and goes only to the provider you pick. Before anything is sent you see exactly what will go: the opening's posting, and only the parts of your resume, answers and profile you tick. Your email, phone, work authorization, sponsorship and salary are left out unless you tick them. That provider's own privacy terms apply to what you send. Vibistic never sees it. Z.ai is part of the Zhipu group, based in China. Its policy names a Singapore company as the operator and says API data is generally processed in Singapore, so consider that before sending your resume with a Z.ai key.
Cloud backup, only if you turn it on
Under Your data you can turn on a cloud backup. It is encrypted in this browser with a recovery code that only you hold (shown once; Vibistic never receives it), so our server stores only data it cannot read: your companies, role types, filters, marks, profile, resume and saved answers. Never your AI key. With the code you can restore it in another browser. The server keeps, for each backup, the encrypted data and a token derived from your code, and sees your IP address when your browser saves or restores, as with any website. You can delete the backup at any time from the same place. Deleting everything on this device turns the backup off here first and keeps the cloud copy, so you can still restore it.
Who sees what
- The job boards (Greenhouse, Ashby, Lever): when you look a company up, your browser asks them whether a board exists under a few likely names; while you follow it, your browser asks for its public openings when you open JobHunter (at most once an hour per board unless you press Refresh), and asks about a single opening when it seems to have closed. They see those requests, your IP address and your browser, as with any website. Your browser sends them no cookies and no referring page.
- Companies with their own career sites (for example Google or Tesla): JobHunter sends them nothing. It only shows you a link to their site, which you open yourself.
- vibistic.com's visitor counter: counts visits to the Vibistic sites. It gets no information about your companies, roles or profile.
- The AI provider you pick, only when you press Send in an apply kit: what you saw in the preview.
- Our server serves the pages and, only if you turn on cloud backup, stores your backup encrypted so it cannot read it.
The page's security policy lets it contact only those job boards, the visitor counter, the five AI providers and this site's own backup endpoints, and runs only this site's own scripts: no analytics and no third-party code.