Privacy
The careers site stores no cookies, measures no traffic and passes nothing to advertising networks. It carries its own fonts and images, so opening it makes your browser touch no outside server. Below is what happens to what you send us yourself.
Data controller
The controller is Headers s.r.o., company number 08496919, registered at Radniční 133/1, 370 01 České Budějovice, Czech Republic. Write to us at info@headers.cz.
Applications
The site has no application form and stores no CVs. You apply by email to jobs@headers.cz, so we only receive what you write yourself: your name, your email address and a few sentences about you, plus a CV or a link to your profile if you send one.
We use what you send to run the hiring process and to agree on working together. The legal basis is Article 6(1)(b) GDPR, steps taken at your request before entering into a contract. Only we read the messages, we pass them to nobody and we use them for nothing else.
We keep an application for as long as the hiring for that role runs. If we want to keep it for roles we open later, we ask you first and keep it only with your consent. You can withdraw that consent at any time.
The game in the footer
The footer starts a small game called bugrunner. Beat the record and you can sign the leaderboard. That sends a three-letter nickname you pick yourself, the score, and a record of your key presses, which the server replays so that a faked result does not count. The game asks for nothing else and signing the board is optional.
To stop the board being flooded, the server notes an IP address with a request count for one minute. It takes nothing else from the address. The legal basis is legitimate interest under Article 6(1)(f) GDPR, namely keeping the leaderboard working and safe from abuse.
Play without signing the board and the result stays in your browser. The site stores two things in the browser: the language you chose and your best results in the game. These are not cookies, they never reach the server, and clearing the site data removes them.
Server logs
The site runs on Vercel, whose servers keep technical records of requests including IP addresses. They serve the running and the security of the site alone. We do not work with them and we do not join them to anything else.
Processors
Three processors take part in running the site. Each is bound by a data processing agreement and handles the data only on our instructions:
| Processor | Role | What it receives | Location |
|---|---|---|---|
| Vercel Inc. | hosting of the site and the leaderboard functions | IP address, browser header, page address and request time in the server logs | Frankfurt, Germany |
| Upstash, Inc. | database behind the game leaderboard | nickname, score and time of the game played; the player's IP address for one minute as a flood guard | Frankfurt, Germany |
| Google Ireland Ltd. | the jobs@headers.cz mailbox | the content of the message you send us, including attachments and your email address | Google data centres in the European Union and the USA |
We sell no data and use none of it for advertising. The site embeds no content from outside servers.
Retention and your rights
A leaderboard entry stays until better attempts push it out; the one-time token for a game in progress expires within thirty minutes. Vercel's server logs are deleted within days according to its own settings. How long we keep applications is described above.
You have the right of access to your data, to have it corrected or erased, to restrict processing, to data portability, and to object to processing based on legitimate interest. You can withdraw a consent you gave us at any time. Send your request to gdpr@headers.cz and we will answer within one month.
Last updated 12 August 2026