Privacy Policy
What we collect, what we show publicly, and who else sees it.
Last updated October 5, 2026
Work With Craft is run by Double Secret Agency, LLC. Most of what you share here is meant to be seen, since that's the whole point of a jobs board. This page explains which parts are public, which parts aren't, and where your information goes.
The Short Version
- We don't sell your information to anyone.
- We don't track you around the web. There are no analytics, advertising pixels, or tracking cookies on this site.
- Your email address isn't shown publicly. Conversations happen through our messaging system instead.
- You can delete your account at any time, and it's deleted immediately.
What we collect
Your account
To create an account, we ask for your first name, last name, email address, and a password. Your password is stored as a secure hash, so nobody can read it (including us).
We also keep track of when you signed up, and when you last signed in.
Your Developer profile
Whatever you choose to add: a photo, headline, location, availability, bio, specialties, portfolio projects, and links to your website, GitHub, LinkedIn, X, or Discord.
A new profile starts out unlisted. It only becomes public once you list it, and it's been approved by a moderator.
Your Company
The Company's name, website, location, team size, founding year, description, specialties, logo, and social links.
If you accept an invitation to join a Company's team, your name, photo, and headline may appear on that Company's public page. You're never added to a team without accepting an invitation first.
Your Job posts
Everything in the Job post, along with a record of which account submitted it.
Your messages
The messages you send and receive, who sent them, and when each person last read the conversation.
Messages are stored as ordinary text, not end-to-end encrypted. Treat them like any other hosted inbox.
Your payments
Payments are handled entirely by Stripe, on their own secure checkout page. Your card details never touch our servers.
At checkout, Stripe asks for your billing address, and optionally a tax ID, so they can produce an invoice. We keep a record of the payment itself: the email address, the amount, which Job post it was for, and Stripe's reference numbers.
When you contact us
The contact form sends us your name, email address, and message. The Feedback flag sends us your message, along with the page you were on and some basic details about your browser, which helps us track down bugs.
Server logs
Like most websites, our servers keep standard logs of IP addresses, browsers, and pages requested. We use them to keep the site running and to stop abuse.
What is public
Anything public can be seen by anyone, including search engines.
| Public | Private |
|---|---|
| Your Developer profile, once listed and approved | Your email address and password |
| Company pages, once listed and approved | Your messages |
| Your name, photo, and headline on a Company team you joined | Your payment details |
| Job posts, once approved | Anything that's unlisted, pending, or rejected |
Worth noting that joining a Company's team can make your name public, even if your own Developer profile is unlisted.
Approved Job posts are also shared beyond this site, including the #jobs channel of the official Craft CMS Discord, and our email announcements.
Who can read your messages
The people in the conversation
When you message a Company, any of that Company's Owners and Managers can read and reply to the conversation, not just the person who replied first.
Your email inbox
When someone messages you, we'll email you a copy of that one message, unless you've turned those notifications off.
Our moderators, only if reported
We don't browse conversations. A moderator can only open a conversation after someone in it has reported it, and only that conversation.
Blocks and reports are kept after the matter is resolved, since a pattern across several reports is often how we spot someone causing trouble.
Who else handles your information
These services process some of your information on our behalf. None of them are advertisers.
| Service | What it receives | Why |
|---|---|---|
| Stripe | Your card, billing address, and any tax ID | Payments, receipts, and invoices |
| Mailgun | Your email address, and the emails we send you | Delivering our emails |
| DigitalOcean | Uploaded images: profile photos, logos, and project screenshots | File storage |
| Cloudflare | Basic browser details, when you create an account | Keeping bots from signing up |
| Our newsletter provider | Your email address, if you subscribe to Job announcements | Sending Job announcement emails |
Our pages also load fonts and scripts from Google Fonts and public code libraries (Tailwind, unpkg), which can see your IP address when your browser requests them.
We may also share information if the law requires it, or to investigate abuse of the site.
Cookies
We only use cookies that the site needs in order to work:
- Signing in. A session cookie keeps you signed in while you use the site.
- Keep me signed in. If you check that box, you'll stay signed in for up to a year, or until you sign out.
- Security. Cookies that confirm a form was submitted from our site, and help keep spam out.
That's why you won't see a cookie banner here.
Emails we send
Account emails
Confirming your email address, resetting your password, and updates about anything you've submitted for review. These can't be turned off while you have an account.
Optional emails
Message notifications are optional. You can turn them off at any time in your Notification Settings.
Job announcements are optional too. Every one includes an unsubscribe link at the bottom.
How long we keep it
Your account and everything in it stays until you delete it. Expired Job posts stay online (clearly marked as expired), so any links people have shared will keep working.
Deleting your account
You can delete your account from your account settings. Deletion is immediate and permanent, there's no grace period and nothing to undo.
- Your account and Developer profile are deleted, including your photos.
- You're removed from every Company team.
- Job posts stay online, since they belong to the Company.
- Your messages stay in the other person's inbox, with your name replaced by "Deleted User".
- If you're the only Owner of a Company, you'll need to transfer ownership first.
Payment records are kept for as long as the law requires.
Your rights
You can view, edit, or delete most of your information directly from your account. To change your name or email address, get a copy of your data, or remove anything else, please contact us.
Depending on where you live (for example, California, the UK, or the EU), you may have legal rights to access, correct, or delete your information, or to object to how it's used. You can also contact your local data protection authority.
Changes to this policy
The date at the top of this page shows when it was last updated. If we make a change that significantly affects how your information is used, we'll email you about it.
Questions?
Please reach out via the contact form, and a real person will get back to you.