Privacy policy

Last updated: 3 October 2026

We respect your privacy. This document explains what data we collect on isitfair.pl, why, on what legal basis, who we share it with, how long we keep it and what rights you have. It also describes the cookies we use.

1. Data controller

The controller of your personal data is GoPrediction Sp. z o.o. with its registered office in Warsaw, ul. Mińska 25B, lok. U2, 03-808 Warszawa, Poland, NIP (tax ID) 1133014941, REGON 386185470, which runs the isitfair.pl website.

In matters concerning your personal data, write to us at privacy@isitfair.pl or by post to the registered office address. We have not appointed a data protection officer.

2. What data we collect and why

You can browse the site without an account and without giving us any data about yourself. An account is needed only to buy a paid plan and use API keys, see section 2.8. The site has no newsletter or contact form.

2.1. Session and security

When you visit the site, we create a technical session identified by a cookie. Together with the session we store your IP address and the type of your browser (user agent). We use this only to keep the site working and to protect it against abuse. Legal basis: our legitimate interest in the security and proper operation of the service (Article 6(1)(f) GDPR).

2.2. Server logs

Like every web server, ours records technical request logs: IP address, requested URL, date and time, browser and system type. They are used only to keep the site secure and to diagnose errors. We do not combine them with other data about you. Legal basis: Article 6(1)(f) GDPR.

2.3. Search and the public API

The phrases you type in the search box are sent to our server in order to return results. We do not build profiles from them. Requests to our API are limited per IP address to protect the service against overload; for this purpose the address is kept in the server cache for up to one minute. Legal basis: Article 6(1)(f) GDPR.

2.4. Visit statistics (Google Analytics)

Only with your consent, we use Google Analytics 4 to understand how visitors use the site (which pages they view, for how long, from what kind of device and country). Google Analytics uses cookies and processes, among other things, a truncated IP address and a random browser identifier. The address of a viewed page may include the phrase you searched for. We do not use this data to personalise advertising. Legal basis: your consent (Article 6(1)(a) GDPR), given in the cookie settings window. You can withdraw it at any time, see section 7.

2.5. Fonts

The site loads its font from Bunny Fonts (fonts.bunny.net). To download it, your browser connects to the provider's servers and sends your IP address. Bunny Fonts sets no cookies and, according to the provider, does not log or track visitors. Legal basis: our legitimate interest in a consistent appearance of the site (Article 6(1)(f) GDPR).

2.6. E-mail contact

If you contact us by e-mail, we process the data you give us in order to handle your matter, on the basis of Article 6(1)(b) or (f) GDPR.

2.7. Data in job offers

The site aggregates publicly available job offers from justjoin.it, nofluffjobs.com and pracuj.pl. Offers describe companies and positions, not visitors of this site. If an offer shown here contains your personal data (for example, you run a business under your own name) and you want it corrected or removed, write to us at the address from section 1.

2.8. Account, paid plans and API keys

When you create an account, we store your name, e-mail address and a hash of your password. We use them to log you in, to confirm your e-mail address with a link we send after registration, to let you reset your password by e-mail and to contact you about your account. If you choose to stay logged in, we set an additional cookie, see section 7. Legal basis: performance of the contract for providing the account (Article 6(1)(b) GDPR).

Paid plans are subscriptions handled by Stripe. Payment takes place on Stripe's pages: card details go directly to Stripe and never reach our servers. We keep only your Stripe customer identifier, the plan and status of your subscription and, if you paid by card, the card type and its last four digits. The billing details you enter at checkout (name or company name, address, tax ID) are used to issue invoices. Legal basis: performance of the contract (Article 6(1)(b) GDPR) and our legal obligations under tax and accounting law (Article 6(1)(c) GDPR).

For each API key you generate, we store its name, a hash of the key, the date it was created and the time it was last used. Legal basis: performance of the contract (Article 6(1)(b) GDPR) and our legitimate interest in the security of the service (Article 6(1)(f) GDPR).

3. Who we share data with

We do not sell your data. It may be accessed only by:

• Google Ireland Ltd. (Dublin, Ireland), the provider of Google Analytics, only after you give consent. Data may be transferred to Google LLC in the USA; Google LLC participates in the EU-U.S. Data Privacy Framework, recognised by the European Commission decision of 10 July 2023 as ensuring an adequate level of protection.
• BunnyWay d.o.o. (Ljubljana, Slovenia), the provider of Bunny Fonts, which receives your IP address when the font is downloaded.
• Stripe Payments Europe, Ltd. (Dublin, Ireland), which processes payments for paid plans and acts as a separate controller of payment data. Data may be transferred to Stripe, Inc. in the USA, which participates in the EU-U.S. Data Privacy Framework.
• The provider of the server infrastructure on which the site runs, on the basis of a data processing agreement.
• Public authorities, when the obligation to disclose data results from the law.

4. How long we keep data

• Session data (IP address, browser type): up to 12 months from your last visit.
• IP address used for API rate limiting: up to one minute.
• Server logs: until automatic rotation (in practice from a few days to a few weeks, depending on traffic).
• Data in Google Analytics: 2 months at the level of events and users; aggregate reports contain no identifying data.
• Account data and API keys: until you delete the account (you can do it yourself on the account page) or revoke the key.
• Billing data and invoices: for the period required by tax and accounting law, in principle 5 years from the end of the calendar year in which the tax obligation arose.
• E-mail correspondence: until the matter it concerns is closed, and afterwards for the limitation period of possible claims.
• Cookies: as in the table in section 7.

5. Your rights

In connection with the processing of your data you have the right to:

• access your data and receive a copy of it,
• have your data rectified,
• have your data erased ("the right to be forgotten"),
• have the processing restricted,
• data portability, for data you gave us on the basis of consent or a contract,
• object to processing based on our legitimate interest (Article 6(1)(f) GDPR),
• withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal,
• lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl) if you believe we process your data unlawfully.

To exercise these rights, write to privacy@isitfair.pl. We will reply without undue delay, within one month at the latest.

6. Automated decisions and profiling

We do not make decisions about you based solely on automated processing, including profiling, that would produce legal effects or similarly significantly affect you. The "fair" rating shown on the site concerns job offers and companies, not visitors.

7. Cookies and similar technologies

Cookies are small text files stored in your browser. We also use the browser's local storage (localStorage) to remember your cookie decision. Storing information on your device and accessing it takes place on the basis of Article 399 of the Polish Electronic Communications Law of 12 July 2024, and the related processing of personal data on the basis of GDPR: Article 6(1)(f) (our legitimate interest) for necessary cookies and Article 6(1)(a) (your consent) for the others. We divide them into two categories:

• Necessary: required for the site to work (session, protection against abuse, remembering your cookie settings). They do not require consent and cannot be switched off.
• Statistics: Google Analytics. Stored only after you give consent.

How to manage your consent

On your first visit we show a banner in which you can accept or reject statistics cookies, or open "settings" to choose categories and save your choice. You can change your decision at any time: click Cookie settings (the same link is in the footer of every page). After you withdraw consent, we stop sending data to Google Analytics and remove its cookies from your browser. You can also block and delete cookies in your browser settings; blocking necessary cookies may prevent parts of the site from working.

8. Changes to this policy

We may update this document when the law or the way the site works changes. The current version is always available at isitfair.pl/privacy-policy, and the date of the last change is shown at the top of the page. If a change concerns cookies that require consent, we will ask you for it again.