Privacy

Updated October 19, 2026.

Biotech Radar has no accounts. Radar itself sets no cookies and shows no ads. It counts page use with its own small, cookie-free measurement (see Site measurement). This page lists everything the site keeps, where it is kept, and for how long.

Résumé match (Beta)

• Your résumé never leaves your browser. The résumé match page reads and matches your résumé on your own device. Your résumé, its text and anything read from it (job titles, years, level) are never uploaded, sent to us or anyone else, and never stored by the site, not even in your browser’s storage. Closing or clearing the page discards it.
• What the page downloads. It downloads the matching model and the job list as ordinary files from this site; these requests carry nothing about you or your résumé.
• Measurement. The page sends one site-measurement event saying the page was opened (as described below). It never includes résumé text or anything read from it, and it is skipped under Do-Not-Track or Global Privacy Control.

Site measurement

Since October 2026 Radar counts how pages are used so we can tell what helps. It runs on our own server (Cloudflare Workers Analytics Engine), not a third-party analytics service.

• Recorded: the event name (for example a page view, a search being submitted, or a link being clicked), the page path with company and job IDs masked, the host name of the site you came from, the host name of an outside link you click, which menu link you clicked, a “pilot” tag when you arrived through a pilot link (a link ending in ?p=…), your country, and the day.
• Not recorded: your IP address, your browser or device (user agent), cookies or any identifier, query strings or what you searched for, and anything you type, including résumé text.
• Turning it off: if your browser sends Do-Not-Track or Global Privacy Control, nothing is sent, and our server also discards any event that carries either signal.
• Retention: events are kept for 3 months and then deleted automatically.

What we keep on our servers

• Feedback form. Your message, the address of the page you came from (this can include what you searched for), the time, and your email only if you choose to give it so we can reply. Kept for 180 days, then deleted automatically.
• Consultant listing requests (the “List your consulting business” form). Business name, website, contact person, email, whether to show your email publicly, services, modalities, location, short description and the time. Kept for 180 days while we review it, then deleted automatically. Nothing is shown publicly unless we approve the listing, and your email is shown only if you ticked “Show my email publicly”.
• IP addresses, for rate limits only. To stop spam and abuse, the server counts requests to the feedback form, the consultant form and the bot check, using your IP address (for IPv6 on the feedback form, its network block) as the counter’s key. These counters are deleted automatically within 2 hours and are not linked to anything you send. The feedback form also uses Cloudflare’s built-in rate limiting, whose short-lived counters are kept by Cloudflare, not by us. Site measurement events are rate-limited the same way: Cloudflare’s built-in rate limiting counts them using your IP address as the key, and the address is never stored with the event.
• Feedback spam protection. When you send feedback, we turn your network address (for IPv6, only its first part, the /48 network) into a one-way hashed code and keep that code, with the time of the post, for 10 minutes so we can limit each sender to 5 posts per 10 minutes. The code is pseudonymous, not anonymous: we can’t read your address from it, but someone who already knew your address could work out that it produced the same code. We never store the address itself in this limiter. Old codes are cleared the next time anyone sends feedback, so in quiet periods they can stay stored longer than 10 minutes, until the next post. In normal use only a handful of codes are stored at once; at most 300 (a hard ceiling for floods). The separate site-wide count (30 accepted posts per 10 minutes) stores only times, no codes.
• Browser type. We no longer store it. Feedback and listing requests sent before this page was updated also include the browser type your browser reported; those are deleted when their 180 days are up.

What stays in your browser

These items are saved in your browser’s local storage on this device only. They are never sent to us, and you can remove them by clearing this site’s data in your browser.

• The city you type in “Where?” on job search, so your area comes first next time (emptying the box clears it).
• The last region page you opened, so search can show that area first.
• Companies you save with “Save” (the company name and the date you saved it).
• Whether you chose to show patient-care jobs on company pages.

Résumé match runs in your browser; the file is not uploaded for the basic match.

Services that process data for us

• Cloudflare hosts the site. Like any web host, it processes your IP address and request details to deliver pages and protect the site from attacks. See Cloudflare’s privacy policy.
• Cloudflare Turnstile is the bot check. When it appears, it loads from challenges.cloudflare.com and Cloudflare processes information from your browser to tell people from bots. See the Turnstile privacy addendum.
• Stripe handles payments if checkout is used. Checkout is currently turned off. If it is turned on, you enter payment details on Stripe’s own page, not on Radar, and Radar keeps only Stripe’s customer reference and which product was bought, so the purchase works. See Stripe’s privacy policy.

Deleting something you sent

To have a message or listing request deleted before its 180 days are up, send a note through the feedback form saying which one, and include the email you used if you gave one.

When alerts launch, Radar will store only your email and saved searches, and you will be able to delete them at any time.