Your data, clearly explained

The short version

A quiet website

We use privacy-preserving, first-party audience measurement derived from our own server logs. We do not use third-party analytics, advertising, or cross-site tracking. We use a short-lived first-party cookie to connect activity within a browsing session. We do not sell personal information. Most pages are static, and the games run entirely in your browser.

On your device

What the site stores in your browser

• Your light or dark preference is kept in local storage under sem-theme. The site stores this preference locally and does not send it to the server. Same-origin scripts read it to apply your chosen theme.
• Game progress and scores stay in your browser. They are not uploaded.
• A session cookie is set after the site owner signs in or after an invited recruiter or hiring contact successfully uses an existing access link or code. It contains a random token, not a name or password, and is marked HttpOnly, SameSite=Strict, and Secure. There is no public account registration.

We use no advertising cookies. The first-party sem_visit cookie contains an opaque random value and expires within 12 hours. A new measurement session starts after 30 minutes of inactivity. It cannot sign you in or grant portfolio access. Browser Do Not Track and Global Privacy Control signals disable this detailed measurement.

Invitation-only portfolio access

Recruiter and hiring-contact access

Some existing invitations use a unique link or access code to open a private portfolio experience. When one of these invitations is used, we record the access record and link used, the time of the visit, the referring website’s origin when the browser provides it, the portfolio sections viewed, and visit counts. The access record may include a contact name, company, role or opportunity, email address, and notes entered by the site owner.

The site may notify the owner by email or in the private app when an invitation is opened. An open shows that the unique link or code was used. It does not prove that the named recipient personally opened it because links can be forwarded and automated security systems may inspect them.

We use this information to provide and secure invitation-only access, understand engagement with the private portfolio, support appropriate follow-up, and detect abuse. We do not use it for advertising, cross-site tracking, or sale to third parties.

Operations and security

Server logs

Our web server keeps standard access logs, including IP address, timestamp, requested page, and browser user-agent. We use these records to operate and secure the site. IP addresses are also held briefly in memory to rate-limit sign-in attempts and contact-form submissions, helping prevent brute-force attacks and spam.

For first-party audience measurement, we filter known bots and probes, then store the requested public page, time, a quarterly rotating salted visitor identifier, and approximate city, region, country, and network provider. Raw IP addresses and full browser user-agent strings do not enter the analytics database. We use this information to understand aggregate traffic, evaluate app-page performance, and measure App Store button clicks. Analytics records are retained for up to 365 days.

Detailed session measurement records page journeys, section visibility, navigation clicks, resume download requests, video starts, scroll milestones, browser and device categories, approximate network location and provider, and estimated active viewing time. A session may be associated with the recruiter invitation used in that browser. Automated previews are classified separately where detectable. Detailed records are kept for 90 days and are visible only to the authenticated site owner. No raw IP address, full user-agent, form contents, query strings, or browser fingerprint is stored in these detailed records.

Campaign attribution is limited to approved source, medium, campaign, and on-page placement labels. We do not store arbitrary URL query parameters in the analytics database.

Service providers

External services

Pages load typefaces from Google Fonts at fonts.googleapis.com and fonts.gstatic.com. Because your browser requests those files from Google, Google receives your IP address and browser user-agent. See Google’s privacy policy.

We may use service providers to operate the site, deliver messages, protect our services, or send email to people who choose to receive it. They receive only the information needed to perform those services and are not authorized by us to sell it or use it for their own marketing. We will update this policy when a new service materially changes how personal information is handled.

When you write to us

The contact form

If you use our contact form, the name, email address, and message you enter are emailed to our mailbox on our server. Your IP address and submission time are included so we can identify abuse. We use this information to respond, provide support, maintain business records, and protect the service.

Submitting a contact message does not automatically enroll you in marketing email.

Optional communications

Email updates and marketing

If we offer email updates, you may separately choose to receive occasional app news, product announcements, and offers from SEM LLC. Joining is optional and does not affect your ability to contact us or receive support.

We will use a subscriber’s name and email address for these messages only after that person chooses to receive them. Every marketing email will provide a way to unsubscribe. We do not sell our mailing list.

How long information remains

Retention

We keep contact messages only as long as reasonably needed to respond, provide support, maintain appropriate business records, and prevent abuse. If you join an email list, we keep your subscription information until you unsubscribe or the list ends. We may keep a minimal suppression record afterward so we can honor your request not to receive further marketing.

Recruiter visit records, referring origins, and section activity are retained for up to 365 days. Notification-delivery records are retained for up to 90 days. Active opportunity records are kept while the opportunity remains active. A closed opportunity record and its associated link data are deleted after 365 days. Backup copies may retain deleted data for up to 30 additional days before aging out.

Age limits

Children

This site is not directed at children under 13, and we do not knowingly collect personal information from them.

Your control

Your choices

You can clear the site’s local storage and cookies at any time in your browser settings. You may unsubscribe from marketing email at any time using the link in a message. To ask what information we hold about you, withdraw marketing consent, or request deletion of a contact-form message or recruiter access record, email us.

Policy updates

Changes

If this policy changes, we will update the effective date shown on this page.