Privacy

If you're just browsing

• No sign-up, no profile, no ads and no third-party trackers.
• Visit counts: we count page views to see how many people use the site and which sites send them here. This uses no cookies and stores nothing on your device; we see totals (pages, referring sites, countries, device types), never who you are or what you did across visits.
• Hearts: when you heart a listing, your browser gets a random ID so the heart counts once. We store only a scrambled (hashed) version of it, which isn't linked to your name, email or anything else about you.
• Timezone: on the gigs page your browser's timezone is saved in a cookie so dates show correctly. It's deleted when you close your browser.
• Job titles link straight to the employer's own site. Anything you do there — including applying — is covered by their privacy policy, not ours.

If you post a gig

We store what you enter in the form:

• the gig details (title, description, category, location, dates, timezone and budget);
• your contact details (email, WhatsApp number, Instagram handle or website);
• your name, if you give one.

Once a gig is approved, all of this is public, including your contact details — that's how people reach you. You confirm you're allowed to publish them before submitting. Search engines may index public gigs.

To prevent spam and abuse we also keep a hashed version of your IP address with the gig, and a hashed copy of your private management link. We can't turn either back into the original.

If you report a listing

We store the reason, any details you write, and a hashed version of your IP address to stop abuse of the report button.

How long we keep it

• Withdrawn gigs are deleted immediately, with their contact details, using the private link you get after posting.
• Expired or rejected gigs are hidden straight away and permanently deleted 30 days later, together with their hearts, reports and hashed IP.
• Reports on imported jobs are deleted 90 days after they're dealt with.
• Rate-limit records (hashed IPs counting recent requests) are deleted after a day.

Why we use it

We publish your gig's details and contact information because you ask us to and consent when posting. We use hashed IPs, rate limits and the spam check to keep the site safe and free of abuse, and anonymous visit counts to understand how the site is used — both in everyone's legitimate interest. We don't use your data for anything else.

Who else handles it

We use a few services to run the site. They process data only on our behalf:

• Vercel hosts the website and counts visits (Vercel Web Analytics). Like any web host, it briefly logs requests, including IP addresses.
• Supabase stores the database.
• Cloudflare Turnstile runs the spam check on the Post a gig form.
• Resend sends us an email when a new gig is waiting for review, which includes the gig's details.

These providers are based in the United States, so your data may be stored or processed there. We never sell data or share it with advertisers.

Your rights

You can ask us to show you, correct or delete anything we hold about you, or object to how we use it. The quickest way to remove a gig is the private link you got after posting; if you've lost it — or your contact details appear in a gig someone else posted — email hello@giganoo.com with a link to the gig and we'll take it down. You can also complain to your local data protection authority.

Children

Giganoo isn't meant for anyone under 16, and they shouldn't post gigs.

Changes and contact

If we change how we handle data, we'll update this page and the date at the top. Questions? Email hello@giganoo.com. See also About.