Gmail Integration

To verify ghosting reports, we offer optional Gmail metadata verification. If you choose to connect Gmail:

• We use the gmail.metadata scope only—read-only access
• We access: email headers, dates, sender and recipient domains
• We do not access: email body, attachments, or any content
• We do not send, delete, or modify anything in your inbox
• Data is used solely to confirm hiring timeline events for your report

Gmail verification is optional. You can submit reports without connecting Gmail (they will be marked unverified).

Data Collection

We collect only the data necessary to provide our service:

• Authentication information (via Google OAuth)
• Report data: company, role, stage, dates, status
• Optional: job URL, req ID, email hash (never plaintext email)

Data Storage

All data is stored securely in Supabase. Email addresses are never stored in plaintext—only salted hashes are stored for credibility weighting.

Data Sharing

Reporter identities are never shown publicly. All reports are anonymized when displayed on company pages. We do not share personal information with third parties.

Your Rights

You can view and update your reports at any time. You can delete your account, which will anonymize your reports (they remain in aggregated statistics but are no longer linked to your account).

Contact

For privacy concerns, data requests, or questions about our use of Gmail data, contact us at privacy@ghostingleaderboard.com.