Privacy

HouseEdge is a casino-industry job board. It shares infrastructure with JunketClub, a separate service run by the same operator, but it is a separate product with its own database, its own accounts and its own sign-in.

A HouseEdge account is not a JunketClub account. Nothing you enter here appears there, and no JunketClub user can see a HouseEdge profile, CV or application. JunketClub's privacy policy does not describe this service and does not apply to it — this page does.

When you create an account:

• your email address and your first and last name
• your password, stored only as a bcrypt hash — we never hold the password itself and cannot recover it
• whether your email has been verified, and when you last signed in

If you use HouseEdge as a candidate, your profile may also hold whatever you choose to add: a headline, a summary, country and city, a phone number, years of experience, skills, languages, a desired salary range, a LinkedIn URL, and a CV file with its original filename and upload date. All of these are optional. The account itself needs only an email and a name.

When you apply to a listing we store the application: which listing, when, its status, your cover letter if you wrote one, and a reference to the CV that was on your profile at the time. It is a reference, not a second copy — replacing or deleting your CV replaces or removes the file the employer can open, including for applications you already sent. The employer may also attach a private note to your application — a comment written by them, about you. You can ask us for a copy of those notes.

If you use HouseEdge as an employer, we store your company profile and your listings. These are business details, not personal data, apart from your own account.

Our servers keep request logs that include IP addresses. We use them to operate the service, to enforce the sign-in and registration rate limits, and to investigate abuse. We are not going to claim a retention period we do not yet enforce automatically: today they are removed when we rotate them, and putting a fixed limit in place is outstanding work.

Your CV is treated as the most sensitive thing on this service, and it is handled accordingly.

• It is stored in a private bucket. It has no public URL, and guessing one is not possible — files are addressed by an internal key that is never sent to a browser.
• It is released only as a signed link valid for five minutes, and only after we have checked that the person asking is entitled to it.
• An employer can reach it only for a listing you applied to yourself. Browsing CVs is not something an employer can do.
• It never appears in any list of applicants. Only opening a single application can produce a link to it.

A candidate profile is not searchable by default. Being discoverable by employers is a setting you turn on, not one you turn off.

When you apply, the employer sees your name, your email address, your profile, your cover letter and your CV. The email address is included deliberately: HouseEdge has no messaging of its own yet, so it is the only way an employer can reply to you.

• To run the service you asked for — an account, a profile, applications you send, listings you post. This is performance of a contract with you.
• To keep the service usable and safe: rate limits, abuse prevention, and the logs that make both possible. This is our legitimate interest.
• Optional profile details and your CV are there because you chose to add them, and you can remove them at any time.

One precision about the second of those: sign-in and registration rate limits are counted per visitor, using the address your request arrives from. That address is the only thing they use — it is not tied to your account and nothing else is derived from it.

We do not profile you, we do not make automated decisions about you, and we do not sell or share your data with anyone for advertising.

The database and uploaded files live on our own servers in Germany. File storage is self-hosted on the same infrastructure rather than handed to a storage provider.

Nightly backups are copied to Cloudflare R2 object storage: both the database and a mirror of uploaded files, which includes CVs. Cloudflare is the one third party that holds a copy of this data. Those copies are encrypted at rest by Cloudflare; we do not add a separate layer of encryption of our own on top, and we would rather say so than let the word carry more weight than it earns.

Beyond that: no analytics, no advertising or tracking technology, no error-reporting service, and no marketing tools. This service sends no email at all today. When that changes — transactional mail about your applications is planned — this page will say so before it does, and mail will be sent from an address on junketclub.app, because houseedge.gold is configured to send and receive no mail.

One cookie: `he-refresh-token`, which keeps you signed in. It is set only after you sign in, it is HttpOnly so no script can read it, and it is scoped to this host alone.

There are no analytics or advertising cookies, and therefore no consent banner — there is nothing here to consent to. Your sign-in token itself is held in memory by the page and is gone when you close the tab.

You can ask us to give you a copy of your data, correct it, delete it, or hand it over in a portable form, and you can object to how we use it.

Some of this you can already do yourself: your profile is editable at any time, and you can delete your CV from your profile page, which removes the stored file.

Everything else — including closing your account — goes through us for now, because there is no self-service account deletion yet. Write to the address below and we will act within 30 days. See the retention page for exactly what happens to each kind of data.

HouseEdge is a service for people looking for and offering work, and is not intended for anyone under 16. If you believe a child has created an account, tell us and we will remove it.

If this policy changes in a way that affects what we do with your data, we will change the date at the top and, where the change is material, tell account holders directly once transactional email is in place.

Questions, requests and complaints: support@junketclub.app.