Privacy policy

It covers bangladeshiworkers.com, the same site as an Android app, and the API behind both. It does not cover anywhere you go after leaving — a Facebook page somebody linked from their profile, or a shop you found here and then visited. Once you contact somebody through this site and carry on by phone, in person or on another app, whatever passes between you is between you.

An account needs an email address and either a password or a Google sign-in. A password is never stored as you typed it: it is hashed with a per-account salt, and there is no way to read it back. Everything else on your profile is optional and typed by you — your name, a photograph, a short bio, your skills, your division, district and area, a phone number, social links and a national ID number.

What you write into the marketplace is stored too, because it is the marketplace: your listings and their pictures, your messages, the ratings you leave, the notes on your saved contacts, and anything you send through the feedback or contact form.

When you sign in, the site records the IP address the request came from, the browser, operating system and device family read from your browser's own user-agent string, your language and your timezone, and the time of that sign-in. Each of those is best-effort: if any of it cannot be read, sign-in carries on without it. Your browser is also asked for your coordinates, and if you refuse the prompt nothing is stored and nothing else changes — the site simply falls back to the area on your profile.

This exists for one purpose: telling one account from another when somebody is reported. It is what lets a moderator see that five accounts abusing the same board are one person on one device, and it is why it is kept out of every public read on the site.

Always public, with no switch to turn them off: your name, your email address, your bio, your skills, your division, district and area, whether you have marked yourself as a worker, whether your ID has been checked, and every rating you have received with the comment attached. These are what make you findable and what let a stranger judge whether to deal with you — a reputation you could hide would not be a reputation.

Four things are switches in your profile, and each starts where it starts for a reason. Your phone number, your ID badge and your last-active time all start private. Your social links start public, because a link to a real account with real history is one of the few ways a stranger can confirm you are a person — and it is a page you already chose to make public elsewhere.

Your token balance, your IP address, your device and browser details, your saved contacts and their notes, your notification history, and your full national ID number are never published by any endpoint on this site. Even with the ID badge set to public, only the last four digits are ever shown, and there is no request — by you or by anybody else — that returns the rest.

A listing never carries its poster's phone number, email or social link on the open board. They are removed before the listing leaves the server, not hidden in the page, so they are not in the response for somebody to read out of it. They are added only for a viewer who has unlocked that listing, for the poster themselves, and for an administrator. This is the whole reason the unlock exists: without it every number on the site would be collected and resold within days.

A profile picture replaces the one before it — the old file is deleted the moment the new one is stored, so there is never a trail of old photographs of you on the server. Remove it and the file is deleted and your Google picture, if you signed in that way, shows instead. Listing pictures live with the listing and are deleted with it, whether it is you deleting it, both sides closing the deal, or a moderator taking it down.

Sending your ID card is optional and nothing on the site is locked behind it. The photographs are stored apart from your profile and are readable through exactly three requests: your own, and the two review queues. They are never attached to a listing, a public profile, a search result or a staff directory read — the profile keeps the verdict and the date, never the pictures.

Change the number while a check is waiting and the request is withdrawn and the photographs are deleted with it. A reviewer is promised an answer to you within 72 hours, and only staff granted that specific permission can open the queue at all — it is deliberately not part of ordinary directory access.

Conversations are stored on the server, because the record of what was agreed is the point of them — a chat that vanished when a listing was taken down would take the evidence of the deal with it. Either participant can delete a thread, which removes it for both of you. Administrators can open a conversation when investigating a report about it; staff moderators cannot. Nothing in your messages is read by anybody otherwise, and none of it is used to advertise to you.

Location on this site is an area, not a position. Your division, district and area are what every board sorts by, and they are typed by you and editable at any time. Your IP address is resolved to a country, division and city once, only to fill the location fields in on a form so you are not typing them from scratch; on a local connection it does not resolve at all and falls back to a default. Coordinates, if you granted them, are never shown to another user and never attached to a listing.

This site sets no cookies at all, and there is no advertising network, no analytics script and no third-party tracker anywhere in it. What is stored is stored by the page in your own browser: the token that keeps you signed in, your language, your theme, a local copy of your own chats so the inbox opens instantly, and small preferences like which tab you were last on. Clearing your browser data removes all of it and signs you out.

Bell notifications are rows in your account — skill matches, ratings, token transfers, ID verdicts and announcements — and you can turn each kind off in your settings. If you install the Android app and allow notifications, a push token for that device is stored so a message can reach you when the app is closed. Signing out of a device clears its token, and you can revoke any device from your settings.

Staff moderators and administrators are not the same role and do not see the same things. A staff member's view of an account is an explicit list — name, email, picture, bio, skills, area, rating, whether the account is held — and phone number, ID, IP, device details and token balance are removed before the response is sent, so they are not withheld in the page but absent from it. Administrators do see those, because a complaint arrives with a phone number or an ID and no other way to find the account behind it.

Each staff member is granted permissions one at a time and every action they take is written down: a takedown records who did it and why, and the person it happened to is told the reason.

Signing in with Google means Google confirms who you are; the site receives your email, your name and your Google profile picture, and nothing else. Verification codes are sent through an SMS gateway, which necessarily sees the number the code goes to. App notifications pass through the platform's push service. Every page loads its fonts from Google's font service, which means your browser makes a request there. None of these are given your listings, your messages or your contacts, and nothing about you is sold or handed to an advertiser.

Ask to delete your account from your settings and everything of yours comes off the marketplace immediately, but nothing is destroyed for 30 days — the window exists so a decision made in a bad hour can be taken back, and cancelling within it restores everything. After it passes, your profile, your listings and their picture files, your conversations, your notifications, your ratings, your token history, your device records and your appeals are deleted, and the sign-in itself is removed so the email can be used again.

Two things deliberately outlive the account. Ratings you left on other people are removed with you, and their averages are recalculated — but a rating somebody else left about a completed deal is their statement, not your data. Records the law requires to be kept, or that are needed for an unresolved dispute, are kept until that ends.

The date at the top of this page changes when the wording does, and it is stamped by hand rather than generated, so it tells you whether anything has actually moved since you last read it. A change that reduces what you are protected by will be announced in your notifications, not quietly published.

Use the contact page, or “Send feedback” at the bottom of any page. Say what you want — a copy of what is stored about you, a correction, or deletion — and the answer comes back in your notifications. If you are asking about an account, write from the email address it uses, because that is the only way to tell it is yours.