Offpeak privacy policy

Your account

When you register, we store your name, email address, account settings, and a hash of your password. If you sign in with Google, Google provides basic identity information, including your name, email address, and a unique Google account ID. We use this information to create or connect your Offpeak account and sign you in. We do not request access to your Gmail, Drive, contacts, or other Google content. If you choose Sign in with Apple in the iOS app, we use the Apple account identifier and the name and email Apple shares to create or connect your account.

Searches, locations, and email

We process the location, commute limit, and filters you choose to find matching jobs. While you are signed in, deliberate changes to your website search automatically store those details as your account search, including your home. Named saved searches are stored separately. When you turn on email for a saved search, we check it for new matches and email you. We record which job details you open to show viewed jobs and avoid sending them again. Signed-in viewed history follows your account across devices. The site may start near your approximate city using information supplied by our hosting provider from your IP address.

Cookies and browser storage

We use cookies to maintain your signed-in session and recognize anonymous viewed-job history. Browser storage remembers viewed jobs, search state, and a search carried through registration. These support the features you use. Clearing browser storage removes those local copies; saved account data remains on the service.

Site analytics

We collect website visits, searches, filter changes, job views, saves, shares, application-link clicks, sign-ins, and alert activity to understand how Offpeak is used. These events include a random browser identifier, event times, the page route, job identifiers where relevant, session, device and browser family, viewport, app version, and country and region when available. A first-party analytics cookie lasts one year. Submitted search text is trimmed and limited to 200 characters. Selected address labels and approximate coordinates rounded to three decimal places (about 100 meters) help us improve location search. If you are signed in, we associate events with your account identifier. We do not store your IP address, email, address keystrokes, or exact coordinates in analytics. Events are queued in our account database until delivered to our own ClickHouse server on DigitalOcean. Backups are stored in DigitalOcean Spaces. We do not sell this information or use advertising trackers. Clearing site cookies and browser storage resets the browser identifier.

AI Agents

When you connect an AI agent, you choose whether it can read or change your latest search, saved jobs, and saved searches. An AI agent with filter access can retrieve your latest search when you ask; no manual transfer is needed. Saved locations are part of your filters. Tool responses can include the starting location, search filters, saved searches, bookmarked jobs, and commute results. The agent receives data returned by the tools it calls and processes that data under its own privacy practices. You can disconnect it in your profile. Signing out of the website does not disconnect an AI agent. Public searches can also use a starting location without an account. Location resolution and driving calculations process the location you supply; it may be an address, place name, or coordinates. Search links returned to the assistant can include your starting coordinates and label.

Temporary assistant results

To keep pagination stable, Offpeak may store a temporary copy of your search filters, starting location, matching results, and the account and permissions associated with that search. These copies expire after 15 minutes and are scheduled for deletion. Small result sets do not need a stored copy. An assistant or a browser may retain information it has already received under its own settings and privacy practices.

Services involved

Cloudflare hosts Offpeak and sends its account and job-alert emails. PlanetScale hosts our account database on Google Cloud infrastructure in the United States. For address lookups, we may send the address you enter to the US Census Bureau geocoder. Place lookup responses may be cached in memory for 30 minutes. Google handles Google sign-in when you choose it; Apple handles Sign in with Apple when you choose it. The website requests map resources through Offpeak’s Cloudflare cache. That cache fetches public tiles and styles from OpenFreeMap and OpenStreetMap without forwarding your browser cookies or IP-address headers. Those providers receive the requested map resources and the cache server’s connection information. Our hosting and delivery services process technical request and delivery information to operate, secure, and troubleshoot the site. Job and application links may take you to another website with its own privacy practices.

Retention and your choices

You can change your name, edit or delete saved searches, and turn their email on or off in your profile, or unsubscribe using an email’s link. Account details and viewed-job history are retained to provide your account until you delete it in account settings or request deletion. Turning email off removes its matching history; deleting a saved search removes it too. Cloudflare Worker request logs have a seven-day retention window. Our account database is automatically backed up every 12 hours, and these backups are retained for two days. Deleted account information can remain in those backups until they expire. Other provider records may remain separately from the active account database. Accepted email delivery receipts are cleaned up after 30 days. Signing out ends the current session. Website sessions expire after 30 days. Assistant access tokens last one hour; refresh tokens expire after 30 days and rotate when used. Revoking a connection stops further account access, but does not delete information already returned to the assistant.

For questions, a copy of your account data, corrections, or account deletion, contact vicente@offpeak.fyi from your account email. We may ask you to verify ownership before acting on a request.

Changes

We will update this page when these practices change and show the updated date above.