Privacy notice

The T&S Network is a free set of resources for people who do Trust & Safety work: a job board, Hidden Talent (which puts people forward for roles), a catalog of tools and services, a company directory, pay research, an events calendar, T&S News, the T&S Digest, and the guides and reference pages around them. It is run by two practitioners and paid for out of pocket. About says more.

The T&S Network is operated by Jeff Dunn. In this notice, "the T&S Network", "we" and "us" mean him. For the purposes of the UK and EU General Data Protection Regulation, he is the controller of the personal information described here. Write to us at hello@trustsafety.net. We have not appointed a data protection officer, and are not required to.

This notice covers everyone the site touches: people who visit without an account, people who hold one, employers who post or brief us, and people whose professional information appears in the directories because it is published somewhere public. It covers every page under trustsafety.net and the application that serves it. It does not cover a site we link to, which has its own notice.

Separately from this notice, creating an account records your agreement to how we store and share your information. That agreement is versioned, and we keep a record of which version you agreed to and when.

Almost everything here is something you typed. The site asks each basic fact once and reuses it, so a tool you switch on does not ask you again for what your profile already holds.

What you give us when you create an account. Your email address and a password, or, if you sign in with Google, the name and email address Google returns. Google also sends a profile picture, which we delete as it arrives. If you want to claim a company page, you can add a work email in Settings; we use it only to confirm where you work, and it is never published.

Your profile. Name, location, current title, current employer, the disciplines you work in, seniority level, work mode and pay. Each is asked because it decides which jobs, pay figures, companies and events we show you. If you switch on Available in Hidden Talent, you may also give us a LinkedIn profile address; it is optional. We do not collect resumes, photographs, personal websites or years of experience.

What each tool asks for on top of that. Hidden Talent asks nothing of its own: switching on Available reads what your profile already holds. T&S Compensation takes a pay report. You can submit one without an account, in which case we do not ask for your name, your email or anything else that identifies you. A company page you claim, a tool or service you submit, an event you add and a review you write take what you type into them. A review written without an account also takes your email, to send the code that publishes it; the email is never shown, and we keep it so each address reviews a tool once. A report you send takes its reason, what you tell us, the page it is about and, if you give it, your email, so we can tell you what we decided.

Tools that are paused. A few tools have been taken down while the site launches. Anything you gave one of them before then is kept with your account until you delete it, is in the copy Settings gives you, and is not shown to anybody.

The T&S Digest without an account. If you sign up for the monthly digest with only an email address, we hold that address, when you confirmed it and when you last received an issue. Nothing else. Unsubscribing deletes all of it.

What the site records as you use it. Jobs you save, tools you upvote, companies you follow, alerts you set, whether you have switched on Available in Hidden Talent, reviews and lists you write, your digest topics and email preferences, your answers to the cookie question, and the dates that tell us how current your profile is. Moderation decisions about anything you submit, and anything you write in an appeal, are kept with the decision.

What is collected automatically. Standard web request information reaches our hosting and database providers as a matter of running a site: IP address, browser and device, the page requested, and the time. An IP address places you in a city or a region, approximately, and that is the only location we ever have that you did not type. Page views and referrers are measured without cookies. If you accept analytics cookies, Google Analytics is loaded and measures how the site is used. Nothing is loaded before you answer.

What we get from other sources. Job listings come from employers' own public application system endpoints and public careers pages, and occasionally name a hiring contact. Company profiles, tool entries and calendar events are sometimes written by us from public material, which can include a named person's public professional information. If a page here holds information about you that you did not give us, write to us and we will correct or remove it.

We never ask for a government identifier, a bank detail or a payment card, and there is no field on this site that takes one.

Under UK and EU law every use of personal information needs a lawful basis. These are ours.

Running your account

Signing you in, holding your profile, keeping your preferences, and letting you switch a tool on or off. Basis: performance of a contract with you.

Hidden Talent

Holding whether you have switched on Available, reading your profile against a brief from a hiring manager, recruiter or agency, and putting you forward for a specific role. Basis: your consent, given when you switch Available on and withdrawn by switching it off.

Email you asked for

Job alerts, the T&S Digest, and a reply when you write to us. Basis: performance of a contract, or your consent where the law where you live requires it.

News about the T&S Network and related services

Occasional email about new features and related services we run, such as Revealed. Basis: legitimate interests, or your consent where the law where you live requires it. Every message has an unsubscribe link, and switching off product news in your email preferences stops it.

Keeping profiles current

Recording activity so we know how fresh a profile is. Basis: legitimate interests, being that a profile is only useful to you if it is current.

Moderation

Reviewing what is submitted, recording the decision and the rule it cites, and handling an appeal. Basis: legitimate interests, and compliance with a legal obligation where one applies.

Security and abuse

Rate limits, spam handling, logs, and investigating misuse. Basis: legitimate interests in keeping the service working and safe.

Measuring the site

Cookie-free counts of page views and referrers on our legitimate interest in knowing what is read. Google Analytics only on your consent.

Aggregate research

Counting openings, pay and tool adoption across the whole database to write the market pages. Basis: legitimate interests. This works on totals and bands, never on a named person.

Where we rely on legitimate interests, we have weighed them against your interests and rights, and you can object at any time: see Your rights and choices. Where we rely on consent, you can withdraw it at any time, and withdrawing it does not undo what was lawful before you did.

Software here stores, searches, ranks, filters and matches records, and drafts email. That is what most of the site is. Specifically: profiles with Available switched on can be scored against an employer's brief by a query in the database, the job board and the directories are ordered by rules the page states, and a fit panel compares what you have told us against a listing.

No decision that affects you is made by software alone. A candidate is put forward by a person, for a specific role, after reading both. A moderation decision is made by a person, names the rule it is under, and can be appealed to a different reader.

The scoring is deterministic and written down. It is rules over columns you can see on your own profile, not a model that learns from you, and your profile is not used to train anything.

Where a list is ordered, the page says what it is ordered by. Paid placement, where it appears, is labeled and sits outside that order, and buys a place above the list, never a position in it. When you save or upvote something from a paid slot, we record that it came from the slot. It counts like any other, and the advertiser is shown how many people did so, never who.

One further use of a third-party model: aggregated market figures, meaning counts, bands and totals with no name and no profile in them, are passed to an AI provider to draft internal analysis. Personal profiles are not sent, and the system is instructed never to describe an individual.

Other people on the site. What is visible depends on what you switched on.

• If you switch on Available in Hidden Talent, you are never publicly listed and employers cannot search, browse or filter you. A hiring manager, recruiter or agency briefs a person here, and a person here decides who to put forward, for a specific role. That employer is then sent a shortlist naming you: your name, current title, current employer, the disciplines you work in, your level, where you are based, the work arrangement you prefer, your LinkedIn profile if you gave us one, and a line on why we think you fit the role. Your pay expectations are never sent. Your email address is not sent until the employer comes back and says who they want to take further. The employer you currently work for, and any company it owns or trades as, is never sent you at all.
• A company page you claim, a tool review, a public list or a quote is public, and is meant to be.
• Analytics we show a tool's maker about its audience are aggregate. A maker never learns who somebody is. Viewer figures attached to a company are company-level and never person-level, and are not shown at all where too few people from that employer looked.

The people who run the network. We can see what you have given us. That is how a shortlist gets made and how a report gets reviewed.

Service providers. These process personal information on our instructions, under contract, and for nothing else.

Supabase

Database, sign-in, and private file storage. Holds everything in your account. United States.

Vercel

Hosting and delivery, and cookie-free page view measurement. Sees request logs. United States.

Resend

Sends the email the site sends: confirmations, password resets, alerts, digests and notices. United States.

Google

Sign in with Google, if you use it, and Google Analytics, if you accept analytics cookies. Nothing else on the site reaches Google: every font is served from here, so an ordinary page load tells Google nothing.

Anthropic

Drafts internal analysis from aggregated market figures. No profile and no name is sent.

Somebody else's site, when you open it. A video in a post plays through YouTube's no-cookie player and nothing reaches YouTube until you press play. Every outbound link, including each headline in T&S News, is an ordinary link. In each case the thing you open sees your IP address and whatever your browser tells it, and it is their notice that applies from there, not ours.

Everyone else, in three cases only. Where the law, a court or a regulator requires it. Where it is needed to establish or defend a legal claim, or to protect someone's safety. And if the network is ever transferred to another operator, including a company formed to run it, in which case the information moves with it and this notice, or one at least as protective, follows it.

The site, its database and its files are hosted in the United States, and the providers above are United States companies. If you are in the United Kingdom, the European Economic Area or Switzerland, using this site means your information is transferred there.

Those transfers are made under the European Commission's standard contractual clauses and the UK International Data Transfer Addendum, which form part of the data processing terms we have with each provider, together with the measures described in Keeping it secure. Ask us and we will tell you what is in place for any one of them.

Some of these you can exercise yourself, right now, without asking anybody.

• See and change what we hold. Everything is on My Profile and the tool pages beside it in your account.
• Take a copy. Settings gives you every row we hold about you as one JSON file.
• Delete everything. Settings again. Immediate, and it cannot be undone.
• Turn a tool off. Available in Hidden Talent, job alerts and the digest are each a switch, and switching one off takes you out of it without throwing your data away.
• Stop the email. Every message has an unsubscribe link, and the preferences are in your account.
• Change your cookie answer. Cookie settings, at any time.

And these, by writing to hello@trustsafety.net, depending on where you live: access to the information we hold, correction, erasure, restriction of processing, portability, objection to processing based on legitimate interests including any profiling, and withdrawal of a consent you gave.

We answer within one month, and tell you if we need longer. We never charge for it, and we never treat you differently for asking.

Everything above applies to you, and the rights in Your rights and choices are the UK and EU GDPR rights by those names.

You can complain to a supervisory authority. In the United Kingdom that is the Information Commissioner's Office, at ico.org.uk. In the European Economic Area it is the authority in the country where you live, work, or where you think the problem happened. We would rather you told us first, but you do not have to.

Giving us your information is never a statutory requirement. It is what an account needs to be an account: without an email address we cannot sign you in, and without a profile Hidden Talent has nothing to match.

This section is the notice required by the California Consumer Privacy Act as amended. It describes the service as it works today rather than the preceding twelve months, because the service has not been open for twelve months and has collected nothing from anybody in that period.

Categories of personal information we collect. Identifiers, being your name, email addresses, account identifier and IP address. Customer records under Civil Code section 1798.80, being your employment history as you typed it on your profile. Commercial information, being what you save, follow and ask for. Internet activity, being how you use the site. Geolocation, meaning the city or region you typed on your own profile, and the approximate location our hosting and analytics providers derive from an IP address. Never precise location, and the site has no field or permission that would give us any. Professional and employment information. Inferences, being the fit and match scores drawn from all of it. Sensitive personal information is limited to your account sign-in credentials, used only to sign you in.

Where it comes from, why, and who gets it. The sources are you, your browser, and public material. The purposes are the ones in Why we use it. The recipients are the service providers in Who sees it.

Sale and sharing. We do not receive money or anything else of value in exchange for personal information, and we do not disclose personal information for cross-context behavioral advertising. That is the position today. If it ever changes, this notice changes with it and the site says so before it starts. We do not use or disclose sensitive personal information for any purpose that would give you a right to limit it.

We do not knowingly sell or share the personal information of anyone under 16. Accounts are for adults: see Age.

Your rights. To know what we collect and what we do with it, to a copy of it, to correct it, to delete it, to opt out of sale or sharing, to limit the use of sensitive personal information, and not to be discriminated against for exercising any of them. The first four you can do yourself from Settings. For the rest, or to use an authorized agent, write to hello@trustsafety.net. We verify a request against the account it concerns before we act on it.

We honor a Global Privacy Control signal sent by your browser as an opt-out of sale and sharing for that browser.

Nothing that is not strictly necessary is set before you answer the banner, and the tag that would set it is not loaded at all until the answer is yes. Accept and reject are the same size and the same weight.

Strictly necessary

Sign-in cookies set by our authentication provider, which keep you signed in and keep a form submission from being forged. No consent is needed for these, and the site does not work without them.

Preferences

Your light or dark theme choice and your answer to the cookie question, both kept in your browser's local storage. They never leave your browser and are not read by us.

Analytics

Google Analytics cookies, set only if you accept them, to measure how the site is used. Change your answer in Cookie settings and they stop.

Page views and referrers are also counted without any cookie at all, which is why that measurement does not carry a question. Pages whose address is itself a one-click link, such as an appeal, are excluded from every measurement, because the address is a credential.

Every table has row level security on it, written into the migration that creates the table and denying by default, so the database decides what each person can read rather than the application remembering to ask. We do not collect resumes. Passwords are hashed by our authentication provider and never reach us. Traffic is encrypted in transit and the database is encrypted at rest. Administrative access is limited to the two people who run the network.

No service can promise this is enough. If a breach happens that puts you at risk, we will tell you and the relevant regulator within the time the law allows.

The T&S Network is for adults working in, or trying to enter, a professional field. You must be 18 or older to hold an account. We do not knowingly collect information from anyone under 18, and if we learn we have, we delete it. If you believe a child has given us information, tell us.

The version and the date at the top of this page identify the wording that applies, and the list at the foot of it says what moved between versions. A change that affects how we use information you have already given us is announced on the site and, where you hold an account, by email, before it takes effect.

Every question about this notice, every request under it, and every correction goes to hello@trustsafety.net, or through Contact. A person reads it.