Privacy Policy

Pre-launch recruiting interest

The public interest form stores your name, email, broad professional interests, optional LinkedIn profile URL, and consent history. It does not accept resumes or collect qualification details. With your explicit consent, we store your interest and may email service-launch updates. Signup does not start a recruiting search or authorize employer submissions. These records are private to Cleared Colorado administrators and do not verify email ownership. Existing private recruiting profiles, resumes, permission decisions, and audit records remain protected; any employer submission requires separate specific permission. Contact hello@clearedcolorado.com to withdraw, request corrections or deletion, or ask about retention. Recruiting consent links are private, expiring bearer links. We do not store raw IP addresses or user agents on recruiting consent records; public signup abuse controls use hashed rate-limit keys.

Overview

Cleared Colorado is a public job discovery site operated and published by Sean Flading. Users apply directly with employers. The optional pre-launch recruiting form collects only basic contact details and broad interests, with an optional LinkedIn URL. We do not collect clearance proof, Social Security numbers, birth dates, SF-86 forms, investigation materials, or classified information.

Information We Collect

Job-alert subscribers provide an email address and the search preferences they choose to save, such as role-interest starters, keywords, named workplaces, held clearance, polygraph, employer, freshness, and a daily or weekly email schedule. Role starters are stored as ordinary saved searches rather than user profiles. Contact emails may include the information a sender chooses to provide about a correction, privacy request, or site question.

How We Use Information

We use alert information to confirm an address, match new eligible jobs to saved searches, send a conditional daily alert or weekly roundup when matches exist, and provide signed management and unsubscribe links. Weekly roundups use the prior seven days and do not send during quiet weeks. We use contact messages to respond to requests and maintain listing quality.

ChatGPT App

The Cleared Colorado ChatGPT app receives only the job-search filters or public job identifier needed to answer a tool request. Filters may include a held-clearance or polygraph value only when you explicitly provide it; the app does not infer either value. We process those values only to query current public listings and return a bounded public result, and the app does not persist tool inputs after the request. We do not receive the full ChatGPT conversation, request a ChatGPT identity, create a user profile, sell or share app-request data for advertising, or use app requests for advertising. OpenAI and our infrastructure providers may process the request under their own terms and privacy policies. If you open an employer application link, that employer receives the normal browser request and its privacy practices apply.

At the application level, each tool's filters and public job identifiers exist only while that request is processed and are discarded when the response completes. Cleared Colorado does not create a per-user copy of the response or a per-user tool-action history. We retain anonymous daily totals for searches with results, empty or unsuccessful searches, successful or unsuccessful job-detail retrieval, citation retrieval, and widget link activations. These totals contain no prompts, search words, filters, held clearance or polygraph values, job identifiers, ChatGPT identities, or browser identities. They are subject to a rolling 13-month retention schedule with daily cleanup. Link measurement sends only a signed, one-use action proof to Cleared Colorado, without cookies or a referrer. Proofs expire after 24 hours; their anonymous replay-prevention hashes are removed by the next daily retention run. They do not identify you or connect your jobs or conversations. Counts describe tool calls and link activations, not unique people, applications, or hires. The fixed MCP outcome and timing headers contain no prompt, filter, job identifier, or user value. Because we retain no app-request profile or per-user history, there is no identifiable app-request record to access or delete here; you control which filters you provide in ChatGPT. Hosting and platform providers may separately retain limited request and security metadata under their own policies.

Site Measurement

Cleared Colorado does not load Google Analytics or set Google Analytics cookies. The first-party measurement cookie is described below. Search Console supplies aggregate information about how pages appear in Google Search, while application records supply operational counts for current jobs, job alerts, email delivery, and employer-link activity.

Historical analytics-consent records collected before this change contain only the event type, time, and a daily one-way deduplication value. No new consent-choice events are collected, and those historical records remain subject to the normal analytics retention period.

Anonymous Operational Measurement

We measure public website entrances and employer-link activations with first-party requests. A browser tab keeps a random arrival nonce and a server-signed receipt in session storage for up to eight hours. Internal navigation and reloads keep that entrance; expiry, a new campaign, or a new external entrance starts another. Separate tabs use separate receipts. A duplicated tab is separated when the browser supports cross-tab messaging; otherwise copied tab storage can share a receipt. Storage restrictions can cause additional or missed arrivals. We respect browser Do Not Track and Global Privacy Control signals for this website measurement.

Arrival records contain a one-way keyed receipt value, time, public entrance pathname, coarse source and medium, an allowlisted campaign category, and whether that entrance led to an employer exit or a confirmed new alert signup. Unrecognized campaign names collapse to “other”; full referrer URLs, click identifiers, query strings, fragments, search words, clearance selections, emails, resumes, and account identities are excluded. Private confirmation, management, unsubscribe, admin, and talent-consent paths are not measured. Referrers without campaign tags only support an inference, and a missing source remains direct or unknown.

A pending alert request may hold the one-way arrival value alongside its operational subscription data so a confirmation in another browser can be credited to its original entrance. This temporary association is removed on confirmation or replacement; requests expire after 24 hours and are purged by the next successful daily retention run. Analytics arrival records themselves do not contain a subscriber or account identifier.

Qualified employer activations remain limited to one event per signed journey and job in a rolling 30-minute period. Legacy clients may still use the existing eight-hour signed HTTP-only cookie; new clients send the signed tab receipt. Raw receipt, nonce, cookie, IP address, and user agent values are not stored in analytics records. Rate limits separately use one-way request identifiers. Following the employer redirect itself is read-only. Arrivals, qualified clicks, and aggregate server measurement counters are deleted after 13 calendar months. These counts describe measured journeys and actions, not unique people, employer applications, or hires.

Email And Unsubscribe

You can change the schedule, edit, pause, or delete saved searches, and unsubscribe from job alerts using the signed links included in alert emails. Management and unsubscribe links do not expose your email address in the URL, and no account or password is created.

Security And Retention

We use administrative access controls, CSRF protection, signed private links, and rate limits on public forms. We keep subscriber, saved-search, delivery, suppression, rate-limit, and audit records as long as needed to operate the service, honor unsubscribe requests, troubleshoot abuse, and maintain listing quality. Sanitized email-provider event details are deleted after 90 days. Operational email records do not retain message content or private management and unsubscribe tokens.

Third-Party Services

We use infrastructure providers for hosting, database storage, email delivery, and the optional ChatGPT app connection. Hosting and platform providers may process limited request, device, network, and security metadata under their own policies. Email delivery providers process recipient and message data so confirmations and matching job alerts can be sent and delivery status can be monitored.

When you choose Map view, your browser requests map data from Mapbox when that service is enabled, or map tiles from OpenStreetMap otherwise. The map provider receives normal network details, including your IP address, the requested map area, and our site origin. Mapbox may also receive map session and interaction information under its own policy. Your search terms, clearance filters, and email address are not sent to the map provider. We remember your List or Map choice only in your browser tab's session storage, and do not request your physical location.

Contact

For privacy questions or data requests, contact hello@clearedcolorado.com. You can also review the site's Terms of Use.