Security & Safety

How we protect your data and keep your account secure.

Data Protection

HTTPS Everywhere: All connections to noreply.careers are encrypted using TLS 1.3, ensuring your data is protected in transit.
Password Security: Passwords are hashed using industry-standard algorithms. We never store plain text passwords.
Secure Cookies: Authentication cookies are marked secure and HTTP-only, preventing unauthorized access.

Authentication Options

Email & Password: Traditional login with secure password requirements.
OAuth Providers: Sign in securely with Google, GitHub, Apple, or other providers. We never see your third-party passwords.

Access Controls

User Data Isolation: Users can only access their own saved jobs, applications, and profile data.

Employer Separation: Employers can only view and manage their own job postings and metrics.

Admin Protections: Administrative functions are restricted and logged for accountability.

What We Never Do

  • We never request credentials for third-party job sites
  • We never ask for payment information via email
  • We never share your personal data with employers without your action
  • We never sell your personal information to third parties

Report a Vulnerability

If you discover a security vulnerability, please report it responsibly:

security@noreply.careers

Please include details about the vulnerability and steps to reproduce. We take all reports seriously and will respond as quickly as possible.

Ownership

noreply.careers is built and operated by Wifisia, LLC (Portland, OR).

Last updated: December 2025