Privacy notice.

Who is responsible

Erala is the data controller for the processing described here. For any question about this notice or to exercise the rights below, email hello@erala.eu.

Browsing without an account

The public job feed, company profiles, the roadmap and this page can all be read without signing in. When you visit them we measure audience statistics using Umami, an open-source analytics tool we run on our own server in the EU.

• No cookies, and nothing stored on your device. Umami derives a daily-rotating, salted hash on the server to tell one visit from another, then discards it. There is no identifier to follow you between sites or between days, which is why you are not asked to accept anything.
• No third party. The data never leaves our server. There is no advertising network, no data broker, and no transfer outside the EU.
• What is recorded: the page visited, the referring site, how quickly the page loaded, and coarse technical facts derived from your request — approximate country, browser and device type. We do not store your IP address. The address of the page is recorded without your search or filter settings, so what you typed into the search box is never part of it.
• Interactions are counted too — a search run, a filter used, a job opened, an apply link followed — as counts of what happened, described in the next section.
• Legal basis: our legitimate interest in understanding whether the site is useful and which job sources are worth adding (Art. 6(1)(f)). We have weighed this against your interests and concluded the impact is minimal, precisely because nothing here identifies you.

Product usage measurement

Alongside page statistics we count a fixed set of actions — a search run, a filter used, a job opened, an apply link followed, a role saved, an application created or moved, a link added to the vault, feedback sent — so we can tell which parts of the product actually work.

A search is recorded as the words searched for, but only when they cannot identify anyone: an entry containing an email address, a web address or a long number is counted without the text. Everything else is recorded as the shape of what happened — which filter, how many results — never as free text you typed.

These counts record whether the person was signed in, never which person. They are not linked to your account and cannot be traced back to you. Legal basis: legitimate interest (Art. 6(1)(f)), as above.

If you create an account

An account exists so you can track your own job applications. We hold:

• Your email address, used to sign you in with a magic link and to reply if you contact us. Sign-in emails are delivered by Brevo, our email provider, acting on our instructions within the EU.
• What you put in the tracker — the roles you save, their status, your notes, and any links you add to the vault. This is yours; we do not read it for any purpose other than showing it back to you.
• Feedback you send us through the in-app button, kept alongside your email so we can follow up.

Legal basis: performance of the service you asked us for (Art. 6(1)(b)). We do not sell or share any of it, and we do not send marketing email.

Job listings

Job adverts on Erala are collected from the public recruitment pages of EU institutions, agencies and bodies. Where an advert names a recruitment contact, we publish role-based addresses only and suppress anything that identifies a named individual.

How long we keep things

• Audience and usage statistics: 12 months, then aggregated counts only.
• Account data: until you delete your account, which removes it immediately and permanently.
• Feedback: kept while it is still useful to act on.

Your rights

Under the GDPR you can ask for a copy of your data (Art. 15 and 20), correct it (Art. 16), delete it (Art. 17), restrict or object to how we use it (Art. 18 and 21). Two of these are buttons rather than requests:

• Export. Your profile page downloads everything held for your account as a JSON file, at any time.
• Deletion. Your profile page deletes your account and its contents outright.

For anything else, email hello@erala.eu. You also have the right to complain to your national data protection authority.

Note that the statistics described above are not linked to your account, so they cannot be retrieved or deleted individually — there is no key that connects them to you. That is a deliberate design choice, not a limitation of the export.

Strictly necessary cookies

Two cookies are set for the site to function, and neither is used for tracking: your sign-in session, and your interface language. Because they are strictly necessary to provide a service you asked for, no consent banner is required.

Changes to this notice

This notice was last reviewed on 6 September 2026. If we change what we collect or why, we will update it here before the change takes effect.