Skip to content
fortyrows

Privacy

Updated October 21, 2026

What we collect

  • Account: email, handle, and your password, stored only as a salted hash. Flair and bio if you add them.
  • Application: the interview details and write-up you submit.
  • Activity: posts, comments, likes, saves, and images you upload. We strip image metadata such as location.
  • Billing: Stripe handles payments and keeps your card for your membership. We keep your Stripe customer ID and membership status, never your card number.
  • Referrals: who referred whom, and the credits earned.
  • Technical: your IP address, hashed, to limit sign-in and sign-up attempts, kept about a day after your last attempt. Session records. Our host keeps standard server logs.

How we use it

To run your account, review applications, take payments, apply referral credits, keep fortyrows secure, stop abuse and answer support requests. We email you only about your account: your application, payments, referral credits and password resets. We don’t sell personal data or use it for advertising.

What’s public

Your handle, flair and bio, and for each post its title, company, role, level, rounds, outcome and counts. Anonymous posts show “Anonymous”; you and staff can still see who wrote them.

Write-ups, questions, comments and images are for members only.

Cookies

  • ff_session keeps you signed in, for up to 90 days.
  • ff_ref remembers a referral link you opened, for 60 days.
  • member_hint lets pages draw the member layout sooner, for 30 days.
  • No analytics or advertising cookies.

Who processes it

Providers that run parts of fortyrows for us: Stripe (payments and tax), Amazon Web Services (hosting, database, file storage and email) and OpenAI (reading write-ups to list the interview questions in them; OpenAI does not train on them and deletes them within 30 days). They may process data in the United States and other countries.

We also share data when the law requires it, or to protect members and the site.

How long we keep it

While your account is open. Sessions end after 30 days without use, and after 90 days at most.

When you close your account, we delete your account data. Your posts are deleted or kept as “Anonymous”, your choice. We keep what tax and billing law require, such as payment records at Stripe.

Your choices

Edit your flair and bio on your account. To get a copy of your data, correct it or delete it, email [email protected].

Depending on where you live, you may have further rights, such as under GDPR or California law. We honor them.

Security

Passwords and session tokens are stored hashed, the site runs over HTTPS, and uploaded images are served only to members. No system is perfect; if we learn of a breach that affects you, we’ll tell you.

Children

fortyrows is for people 18 and over. We don’t knowingly collect data from anyone younger.

Changes

We’ll post any update here with a new date and tell members about material changes before they apply.

Contact