Privacy Policy

In short: Teens give us nothing. Employers give us business contact details. Everyone gives us an IP address, because that's how the internet works.

Information you give us

If you browse jobs, you give us nothing. There is no account, no sign-up form, and nothing to fill in. If you are an employer, or you claim a business, we collect: business name, email address, phone number, mailing address, job title, listing content, and a password if you create an account.

We do not process sensitive personal information.

Payment information

Payments for featured listings are processed entirely by Stripe. Card details are entered on Stripe's own checkout page and never reach our servers. We do not collect, process, or store card numbers or security codes. We keep a record of what an employer bought and when, so we know which listings to feature and for how long.

Information collected automatically

When you visit, we automatically receive your IP address, browser and device characteristics, referring URL, and information about which pages you viewed. This is used to keep the site running and secure.

Location. We never request or use your device's location. There is no GPS and we do not ask your browser where you are. Any location information is either coarse and derived from an IP address, or a place name you typed into the search box yourself.

More detail on cookies is in our Cookie Policy.

Information from other sources

Some listings and business records are collected from job postings published on company websites and from public business directories, including the Google Places API. This includes business names, addresses, phone numbers, websites, and job posting content. It is business information, not information about the people who browse this site.

Google APIs

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

In short: To run the directory, keep it working, answer you, and stay within the law.

• To provide the service: showing jobs, running searches, letting employers manage listings.
• To respond to your questions and support requests.
• To send administrative messages: an edit link you asked for, a claim verification, changes to these terms.
• To contact businesses about listing with us. You can tell us to stop at any time and we will.
• To protect the site: abuse prevention, rate limiting, and fraud monitoring.
• To understand which pages get used, so we know what to improve.
• To comply with our legal obligations.

We do not use your information to build a profile about you, and we do not use it for targeted advertising.

In short: Service providers who run parts of the site for us. Nobody buys anything from us.

We share information with companies that perform services on our behalf, under contracts that require them to protect it and to use it only as we instruct:

• Supabase: database and account authentication.
• Vercel: website hosting and server logs.
• Resend: sending transactional email to employers.
• OpenAI: turning search text into a form the search can match against.
• Google: Sign-In for employer accounts, AdSense for advertising, and Analytics if you consent to it.
• Stripe: payments for featured listings.

We may also transfer information as part of a merger, sale, or acquisition of the business.

Applying to a job takes you to the employer's own website. We are not responsible for what happens there, and this policy does not cover it. Linking to an employer is not an endorsement of them, see our Terms of Service on what we do and do not verify.

In short: Some are necessary. Advertising cookies are set for everyone, because ads pay for the site. Analytics only runs if you say yes.

Ads on this site are matched to the page you are looking at, not to you. That is not a sale or a share of your personal information under US state privacy laws, so ads run whether or not you consent, but the cookies they set are disclosed to Google.

Analytics is different: the script is not loaded at all unless you consent, so those cookies do not exist for anyone who declines. If you withdraw consent, we delete the advertising and analytics cookies already in your browser rather than simply stopping new ones.

Full detail, including every cookie by name, is in our Cookie Policy.

In short: Search uses AI to understand what you meant. It never analyses you.

When you search, the words you type are sent to OpenAI to work out what you meant, so that searching “barn helper” also finds a job posted as “farmhand.” Searches are stored by the words alone and are never linked to you or to any account.

The AI ranks job listings. It does not evaluate people, build profiles, or make any automated decision about you. Nothing you type is used to train an AI model.

Employers can create an account using Google Sign-In. If you do, we receive your email address from Google and use it to identify your account. That is all. We do not receive your contacts, and we do not use it for advertising. Teens never sign in at all.

In short: IP addresses for a day. Most other things until you ask us to delete them.

• IP addresses collected for abuse prevention, deleted after 24 hours.
• Business contact details: kept while the business is listed, deleted on request.
• Unfinished business claims: name, email and job title deleted after 90 days.
• Approved claims: kept as the record of who controls an account.
• Search queries: cached by the search text alone, never against a person, and removed after 180 days unused.
• Our own cookies: one year.
• Analytics data: two months.
• Advertising and analytics cookies set by Google: Google's own schedule, and deleted immediately if you withdraw consent.
• Server logs: our host's retention period.

We use technical and organisational measures designed to protect the information we hold. No system is perfectly secure, and we cannot promise that no one will ever defeat our protections. What we can do is hold as little as possible, which is why browsing this site requires no account and no personal details at all.

In short: You can ask what we hold, ask us to correct it, and ask us to delete it. We answer everyone, not only people whose state requires it.

You have the right to:

• Know whether we are processing your information, and get a copy.
• Correct anything that is wrong.
• Ask us to delete it.
• Opt out of personalised advertising or analytics.
• Not be treated differently for exercising any of these.

To do any of that, use our contact page or email cjlahart@teenworkr.com. If we decline a request, you can appeal at the same address, and if we decline the appeal you can complain to your state attorney general.

To stop marketing emails, reply to any of them and ask us to stop. We will still send service messages you have asked for, like a listing link you requested.

There is still no agreed standard for browser Do Not Track signals, so like most sites we do not respond to them.

We do honour Global Privacy Control. If your browser sends a GPC signal we treat it as a valid opt-out: advertising personalisation and analytics are switched off, and any advertising or analytics cookies already stored in your browser are deleted. You do not need to do anything else, and the footer link will tell you it has been applied.

In short: We have not sold or shared personal information in the last twelve months, and we have no plans to.

If you live in California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you have the rights listed in section 10 above. We extend them to everyone regardless of where you live.

What we have collected in the last 12 months

We have not sold or shared personal information for a business or commercial purpose in the preceding twelve months. We have disclosed categories A, B, D, F, G and I to the service providers listed in section 3, so that they can do the work we use them for.

Rights that depend on where you live

The rights in section 10 apply to everyone. Some states grant additional ones, and they are listed here individually rather than summarised, because several of those laws require a policy to describe the specific rights available:

• Right to know whether we are processing your personal data.
• Right to access your personal data, and to obtain a copy of what you previously shared with us.
• Right to correct inaccuracies in your personal data.
• Right to request deletion of your personal data.
• Right not to be discriminated against for exercising any of these.
• Right to opt out of processing for targeted advertising, the sale of personal data, or profiling that produces legal or similarly significant effects. We do none of these, so there is nothing to opt out of, but the right exists regardless.
• Right to access the categories of personal data being processed (including under Minnesota law).
• Right to obtain a list of the categories of third parties we have disclosed personal data to (including under California, Delaware and Maryland law).
• Right to obtain a list of the specific third parties we have disclosed personal data to (including under Minnesota and Oregon law).
• Right to obtain a list of third parties we have sold personal data to (including under Connecticut law). We have sold none.
• Right to review, understand, question and, depending on your state, correct how personal data has been profiled (including under Connecticut and Minnesota law). We do not profile.
• Right to limit the use and disclosure of sensitive personal data (including under California law). We do not process sensitive personal data.
• Right to opt out of the collection of sensitive data and of personal data collected through a voice or facial recognition feature (including under Florida law). We have no such feature.

These rights are not absolute, and in limited cases we may decline a request where the law permits it. If we do, we will tell you why and you can appeal.

Retention for each category is in section 8. You can designate an authorised agent to make a request for you; we may ask for proof that you authorised them. We will verify your identity before acting on a request, using only the information you provide for that purpose.

California Shine The Light. California residents may request, once a year and free of charge, details of any personal information we disclosed to third parties for their own direct marketing purposes. We do not disclose personal information for that purpose, so the answer will be none.

Some listings are collected from job postings published on company websites and from public business directories. We never invent details: if a posting doesn't state a minimum age, we say “age not listed” rather than guessing.

If your business is listed and you'd rather it wasn't, email us and we'll remove it, no explanation needed, and we won't add it back.

We will update this notice when what we do changes. The date at the top will change with it, and if the change is significant we will say so on the site.

Email cjlahart@teenworkr.com or use our contact page. We read both, and we'll reply within a few days.