Jobs › Privacy

Privacy

What we store about you, in plain English, and what we deliberately do not.

Who we are

Xlookup is built and run by G2G Advisory Limited (England), the data controller for anything on this page. Contact is at the bottom.

What we store when you have an account

• Your email address, and your name and profile picture if you sign in with LinkedIn. The LinkedIn sign-in gives us exactly those three things: no connections, no posts, no career history.
• Your profile: the name you typed, which year you are in, and your two email switches (alerts, digest).
• What you track: the firms, programme types and divisions you have ticked, and a record of which postings we have already emailed you about so you are never sent the same one twice.
• Your advisor conversations, because a thread you can come back to is the point of the advisor. They are stored on your account and shown only to you.
• The CV tool: your CV text itself is never stored. While a reading runs it is held encrypted for at most two hours, then deleted. What we keep is a short list of facts we extracted from it (university, degree, employers, dates, skills; nothing about societies, interests, health, religion or politics), and the diagnosis or rewrite we wrote for you, so you can come back to it. Forget everything from the CV page removes all of it.
• Payments: Stripe handles cards. A card number never reaches us and is never stored here. We keep your Stripe customer and subscription identifiers and whether your membership is active.
• Your LinkedIn profile address, if you chose to contribute it, and the date you gave it. It is stored because you agreed to one named permission and for nothing else; withdrawing that permission erases it in the same second and shows you a receipt. We store the address, never a copy of your profile, and no page on this site ever shows it to anyone but you.
• The funding route: if you ask us to call you, the three sentences you wrote and the phone number you gave us, so we can. Nothing automated reads them.
• Two cookies. A sign-in cookie (xl_session), which is how the site knows it is you; it lasts 90 days or until you sign out. And a one-byte xl_seen cookie so the welcome line on the home page shows once, not every time. That is all.

What we do not do

• No tracking scripts. The site ships no JavaScript at all: no analytics, no advertising pixels, no third-party anything on the page.
• No IP addresses, no browser fingerprints. We count page views per path per day, a number with a flag for crawlers, and that is the whole of our traffic log. It cannot identify you and it is not tied to your account.
• No selling, no sharing for marketing. Your details go to exactly two processors, both needed to run the site: Cloudflare (hosting and the database) and Resend (sending the emails you asked for). Stripe, when you pay.
• No AI scoring of you. The funding route is read by a person, never a model.

People on the site

Career statistics on the site are published only as groups of five or more, never as an individual, and no one from any social network appears anywhere on it. Where we name a person it is because the firm itself published them (a team page, a filing, the press) and the source is shown beside the name. If that person is you and you would rather not appear, email us and it is removed.

Your rights

Anything you granted permission for is listed at your permissions, where withdrawing it deletes what was processed under it and shows you a receipt. Email us to see what we store about you, to correct it, or to delete your account and everything attached to it. We do it by hand and we do it quickly. You can also complain to the ICO (ico.org.uk), though we would rather hear from you first.

Email

We send you what you asked for: the sign-in link, one welcome note, alerts for what you track, and a Monday digest when you track something. Switch alerts and the digest off from your account; deleting your account stops everything.

Contact

G2G Advisory Limited, England. admin@g2gadvisory.co.uk. A person reads it, and a reply to any email we have sent you lands in the same place.

Last updated 7 September 2026.