Back to NextRoles

Terms, privacy & data use

How NextRoles may be used and how information is handled.

Last updated: 31 October 2026

Terms of Service

Who can use NextRoles

NextRoles is for people aged 13 and over. Individual sign-up opens to everyone on 16 November 2026; until then you can join the waitlist, or be invited by a school or by us. When you sign up on your own we ask whether you are 13 to 17 or 18 or over. If you are 13 to 17, a parent or carer must agree to the payment for your plan, and you tick a box to confirm they do. We keep a record of your answer, when you agreed to the terms and which version, and we do not collect your date of birth. If your school has set up the account for you, the school confirms your age. If you are under 13 and have not been given an account by a school, please do not use NextRoles. If you think a child under 13 has an account, contact support@nextroles.org and we will look into it.

Who runs NextRoles

NextRoles is operated by the UK-based partnership of Max Fowler and Joshua Wallace-Jones, trading as NextRoles (“NextRoles”, “we”, “us”). For support, complaints or questions, email support@nextroles.org.

What the service does

NextRoles helps people compare a CV with a job or work-experience advert, draft application materials, build a CV, practise interviews and reflect on skills. It supports an application; it does not contact employers, submit applications, arrange placements, approve an employer or placement, guarantee an interview or role, or make a recruitment decision. Skills Review is a reflection tool, not a clinical assessment or validated psychometric test.

Your account and content

Keep your sign-in details private and tell us if you suspect unauthorised access. You can sign in with your email and password or, where it is available to you, with a Google or Microsoft account that you connect to your NextRoles account (see “Signing in with Google or Microsoft” in the privacy notice). You are responsible for keeping that account secure too, and you should only connect an account that is yours. Upload only material you are entitled to use, and avoid unnecessary personal information about other people. You retain your rights in the material you provide; we process it to deliver the features you request.

Do not use the service to impersonate someone, fabricate qualifications, upload unlawful material, interfere with security or deliberately overwhelm the service. Access may be restricted to protect users or investigate misuse. Contact support if you believe a restriction is mistaken.

Check AI-generated material

Reviews, scores, suggested answers, interview feedback and application wording are generated assistance and can be inaccurate, incomplete or unsuitable. Check names, qualifications, dates and claims before using them. A fit score is guidance, not a fact or a decision about a person. Employers and schools must use their own judgement; NextRoles must not be the sole basis for recruitment, pupil assessment or placement approval.

General-user accounts

A person who registers or is invited as a general user controls their own account and saved material. NextRoles acts as controller for that account data so it can provide the service, maintain access, answer support requests, prevent misuse and meet legal obligations. General-user data is not placed in a school workspace unless the account is separately associated with one through an authorised process.

School-managed accounts and the school pilot

During the school pilot, authorised school staff may create student accounts, organise permitted groups, view relevant application activity and documents, and export material where their role allows it. The school chooses which pupils take part and is responsible for its own notices, lawful basis, staff permissions, employer or opportunity review, placement approval and all placement administration. NextRoles provides application support only. For school-managed student data, the school is controller and NextRoles is processor under the Data Processing Agreement.

Availability, plans and your rights

Features and availability may change, and maintenance can temporarily interrupt access. A paid offer will show its price, included limits, renewal and cancellation conditions before purchase. Nothing in these terms removes consumer rights or excludes liability that cannot lawfully be excluded.

Paid plans, renewal and cancelling

New individual accounts choose a plan and start it before they can use NextRoles. The plans are Starter (£4.99), Pro (£9.99) and Max (£19.99) a month. Your first plan starts with a free 7-day trial. We take your card details when you start, but nothing is charged during the trial. We email you 3 days before it ends (on day 4) to remind you of the date and the amount, and billing starts on day 7. On Max (£19.99) your first month is £9.99, then £19.99 a month. If you cancel before then you pay nothing; if you do not, the plan renews each month at the normal price until you cancel. The free trial is for your first purchase only, and one per person. The price and monthly allowances are shown on the Plans page and again on the confirmation screen before you pay. Payment is taken by our payment provider on its own secure page; NextRoles never sees or stores your card details.

Renewal. A plan starts as soon as payment succeeds (or, on a free trial, when the trial begins, with billing starting on day 7) and renews each month at the same price until you cancel. We will give you at least 30 days’ notice by email before any price rise, and you can cancel before it applies. We will email you a few days before each renewal to remind you of the date and the amount, and you can cancel before then at no charge.

Cancelling. You can cancel at any time from Manage billing on the Plans page; it is as quick as buying. If you cancel, you keep your plan until the end of the month you have paid for, and you are not charged again. When a plan ends, you will need to choose a plan again to keep using NextRoles. Your saved work stays in your account.

Your 14-day right to cancel. When you first buy a plan you can cancel within 14 days and get a refund. Because you ask us to start straight away, we will deduct a fair amount for the service you have already used in that time. To use this right, email support@nextroles.org; any refund goes back to the original payment method within 14 days. The 14 days apply to launch offers too: if you cancel within 14 days of a free first month you owe nothing, and on a discounted month you pay only for the service you have used, never more than you were charged. This does not affect your other legal rights, including if a service is not provided with reasonable care and skill.

Failed payments. If a payment fails, our payment provider retries it and emails you. If it cannot be collected, the plan ends and you will need to choose a plan again to keep using NextRoles. Allowances are monthly and do not roll over.

Deleting your account cancels any paid plan, with no further charge. When an account is deleted, our payment provider keeps the payment record (your name, email address and payments) for up to six years because tax law requires it, and we use it for nothing else. We also keep a one-way coded record that a launch offer was used, which cannot be turned back into your email address, so that each person can have the offer once.

NextRoles, its website, software, design, wording, guides, career descriptions, photographs, icons, name and logo belong to NextRoles or its licensors and are protected by copyright, trade mark and other intellectual-property rights. These terms give you a personal, non-exclusive, non-transferable right to use the service for its intended purpose while your account is active. They do not transfer any ownership to you. Do not copy, republish, sell, scrape, reverse engineer or build a competing product from the service or its content, or remove any copyright or ownership notice, except where the law allows it or we agree in writing.

Your material. You keep ownership of the CVs, letters, answers, experience records and other material you provide. You give NextRoles a limited, worldwide, non-exclusive licence to store, process and display that material, and to pass it to the companies that help us run the service, only so that we can provide the features you ask for, keep the service secure and meet our legal duties. The licence ends when you delete the material or your account, apart from the limited records described in the privacy notice. We do not use your material to advertise to you or sell it to anyone. You confirm that you have the right to provide it, including any employer, school or third-party text, logo or image you upload, and that it does not infringe anyone else’s rights.

AI-generated drafts. As between you and NextRoles, you may use the drafts, CVs, letters and answers the service produces for you, for your own applications, as you see fit. AI output can resemble material produced for other people, and we cannot promise that it is unique or that copyright subsists in it. Check it before you rely on it (see “Check AI-generated material”).

Schools. A school keeps its own name, logo, colours and other branding and the work its pupils and staff upload. By adding school branding the school confirms it may use it and gives NextRoles permission to display it to that school’s users. NextRoles does not claim ownership of it.

Feedback. If you send us suggestions or feedback, we may use them to improve the service without payment or credit to you, but we will not publish your name or personal information because of them.

Reporting a concern. If you believe material on NextRoles infringes your copyright or other rights, email support@nextroles.org with your name, what you believe is infringed, where it appears, and why you believe it is unauthorised. We will look into it and may remove or restrict the material while we do. Nothing in these terms limits any right you have that cannot lawfully be limited.

Updates and questions

Material changes should be communicated before they take effect where required. Contact support if you need help understanding a change or want to stop using the service.

Privacy notice

Information involved

Depending on the features used, we process account name and email, password hash, session and access records, optional CV contact details, CVs and drafts, job or work-experience adverts, fit results, cover letters, application-question answers, interview practice, skills answers and profiles, your experience log entries and any proof you attach, your application tracker entries, the interests, LinkedIn address and display name you give when setting up, text you choose to dictate, feedback, support requests and bug reports (which, if you leave the option ticked, include the page you were on, your browser and your screen size, but no CV or other content). School-managed use also involves school membership, staff roles, pupil groups, document access and export audit records. If you connect a Google or Microsoft account for signing in, we also process an identifier for that account and the email address it supplied. Technical systems process IP address, browser and request information needed to deliver and protect the service.

Age

We do not ask for or store a date of birth or age. When creating an account or accepting an invitation you tick a confirmation described under “Who can use NextRoles”; that tick is checked in your browser and is not saved as a record. Because many pupils are under 18, we try to collect only what each feature needs and to keep language and content suitable for young people.

Why information is used

For general users, we use information to perform our contract by providing requested features and maintaining the account. We use limited account, request and diagnostic information where necessary for our legitimate interests in support, service reliability, fraud prevention and enforcing fair usage. Letting you sign in with a Google or Microsoft account is part of providing your account, and the one-off email check we send before connecting one protects accounts from takeover, which is a legitimate interest. We use information where necessary to meet legal obligations or establish, exercise or defend legal claims. For a school-managed pupil, the school determines its lawful basis and purposes; NextRoles processes the data on the school's documented instructions.

Who can see it

You can see your own account content. Authorised school staff can see only the pupil information permitted by their assigned role and group or school scope. Site administrators can access information where needed to operate the service, support an account, investigate misuse or respond to a report. Employers do not receive information from NextRoles: the user decides whether to copy, download or send an application.

Companies that help us run NextRoles, and international processing

We use other companies to run parts of NextRoles: for example the companies that host the website and our database, route and protect requests, take payments, send our emails, power the AI features, check links for safety, measure which pages are used and alert us when something breaks. We use them only to provide NextRoles to you. This is how almost every online service works, and none of it is for anything other than running NextRoles. These companies handle information on our instructions and under their written terms with us, and may not use it for their own purposes. The exception is a payment provider, which is also responsible for its own legal duties such as fraud prevention and tax records. We never sell your information, rent it out or share it so that anyone can advertise to you, and employers never receive it from us.

What each kind of company receives is limited to what the feature needs:

Some of these companies process information outside the UK. Where they do, we rely on the contractual transfer safeguards the law requires (or a UK adequacy decision) and limit information to what the feature needs. If you would like to know exactly which companies handle your information, you are entitled to ask: email support@nextroles.org and we will tell you.

Signing in with Google or Microsoft

Where it is available to you, you can sign in with a Google or Microsoft account instead of, or as well as, a password. It is always optional, and your email and password keep working unless you choose otherwise. When individual sign-up is open, you can also create an account this way; if the provider vouches for your email address the account is made straight away, otherwise we email you a link to confirm it first.

We receive only confirmation that the account is genuine, an identifier that is unique to your Google or Microsoft account, and the email address on it. We do not ask for or receive your password, contacts, files, calendar or photo, and we do not keep the access tokens they issue. We store the identifier, the email address (so we can show you which account is connected) and when you last signed in this way.

The first time, we check that it is really you. Either you connect the account yourself while signed in, or, if you use the button on the login page with an address that matches an account, we email that NextRoles account to confirm. The link only works on the same device and browser where you started, expires after 15 minutes and can be used once. We never give access based on an email address alone.

Google and Microsoft decide for themselves how they use information about your sign-in (they will know that you signed in to NextRoles) under their own privacy terms, and are not acting for us. Please read their notices if you want to know more.

For school accounts this option is switched off unless the school, as controller, asks us to switch it on. You can disconnect it at any time from your account settings, and we then delete the stored identifier. Deleting your account deletes it too, and unconfirmed sign-in checks are removed within a day of expiring.

Experience log

The experience log lets you record work experience, volunteering, jobs and activities, with a title, organisation, sector, dates, a summary and, if you wish, proof such as a letter, certificate or photos. Ideas you are only thinking about stay private to you. If you use NextRoles through a school, an entry that you have started or finished is sent to your school's admins to confirm or decline. A school admin can hand an entry, or all the entries from a class or year group, to one teacher of the same school to decide instead, and that teacher can hand it back; the school is the controller of that information and decides how it is used. Your entry and its proof can be opened only by you and the people who can review that entry: your school's admins and the one teacher an entry has been handed to, and only for entries handed to them. Other teachers cannot open them. Site administrators can also open them where needed to operate the service or investigate misuse. For a personal account nothing is sent for approval and entries are marked as self-declared. Entries stay until you delete them or your account. Proof files on an entry that has been approved or declined are deleted 12 months after the decision. Do not upload identity documents or sensitive information about other people. Entries and proof are erased when you use “delete my data” or delete your account.

Calendar

The calendar lets you keep events with a title, dates and times, an optional place and notes, up to five tags, and a reminder. Events you add yourself are private to you. A teacher can choose to share an event with their groups, chosen students or, for careers teachers and school admins, the whole school; those students see it on their own calendar, cannot change it, and are not shown who else it was shared with. Events created by school staff for a school’s students are the school’s information (the school is the controller); school admins of that school can change or delete them, and they stay with the school if the staff member uses “delete my data”, but are removed when the staff account is deleted. A reminder you choose is written into your calendar link so that your own calendar app can show it; NextRoles does not send reminder emails or notifications of its own. You can make a private link to see your events in Apple Calendar, Outlook or Google Calendar. Anyone who has the link can see the events in it, so keep it to yourself; only a scrambled version of the link is stored, you can reset it (the old one stops working) or switch it off at any time, and the link never contains anything beyond event titles, dates, places and notes. We do not connect to those services’ accounts and we send them nothing: their apps fetch the link themselves. Your own events and your link are erased when you use “delete my data” or delete your account.

Application tracker

The tracker lets you keep a list of jobs you are applying for and where each one has got to. It holds up to 100 live entries per account. An entry you have not edited for 90 days is deleted automatically. Before it is deleted we add it to simple running totals of how many applications reached each stage; those totals contain no job titles, employers or notes and are kept so that your all-time numbers stay accurate. If you reach interview, offer or accepted for the first time we ask whether you are happy to share that result; we store your answer but do not currently use it for anything. Tracker entries and totals are erased when you use “delete my data” or delete your account.

Details you give when setting up

When you first sign in we may ask for the name you want shown, your interests, your experience and your LinkedIn address. Only the name is needed; everything else is optional and you can skip it. Staff accounts are also asked for the name students will see, and the school’s support options and tools. You can change your name at any time under Account.

Optional speak-to-type

Some writing boxes offer a “Speak instead” button. It is off until you press it. When used, your browser's own speech recognition turns your voice into text. The audio is normally sent to the company that makes your browser or device, under that company's own privacy terms, and your browser will ask for microphone permission first. NextRoles does not receive, record or store the audio; only the words that appear in the box are treated like anything else you type. Browsers without this feature do not show the button. Do not dictate sensitive or personal details about other people, and avoid using it where others can overhear.

Optional page translation

When you apply another language, a third-party translation service processes the displayed page text in your browser. This may include visible CV-review or account information. Typed form entries are not deliberately submitted by NextRoles. Choose English to restore the original page language.

Payments

If you buy a plan, our payment provider collects your card details directly; we never receive or store them. We keep only a payment-provider customer reference, subscription reference and status, your plan and its renewal date, so we can give you the right allowances and let you manage billing. We use this to perform our contract with you. Payment, invoice and tax records are kept for as long as UK tax law requires, normally six years, even if you delete your account; deleting your account cancels any paid plan.

Waitlist

If you join the waitlist we store your email address, your first name if you give it, a short label for where you came from (for example “instagram”) and which waitlist page you used, your place in the queue and how many friends have joined from your personal link, held by our email provider and in our database. If you join from a friend’s link, we add to their count that a friend has joined and email them to say so. When you open your ticket, we count how many times you have viewed it, and whether you came from the link in one of our emails. By pressing the join button, next to a sentence saying so, you agree to this. We then use these details to email you your place and personal link once when you join, tell you when a friend joins from your link, email you when NextRoles opens, and send at most one reminder if you have not joined by then. We do not use them for anything else or share them. Every one of these emails has an unsubscribe link, and you can ask us to delete your details at any time by emailing support@nextroles.org. The same applies if you join from the optional email box shown while a free check runs (see Free scan codes below); there, the label for where you came from shows which batch of codes you were given.

Free scan codes

Some people are given a free scan code. It gives one free job check without an account, and you must be 13 or over to use one. If you use one, the CV you upload or paste and the job advert you paste or link to are sent to our AI service to make your result, which is shown to you on screen. NextRoles does not save your CV, the job advert or your result, and nothing is added to any account, because there is no account. We cannot see or recover your result afterwards, so copy anything you want to keep. If you use the “Pull text” button, we load the web page you give so its text can be shown to you, and we do not keep it. To give one free check per person, and to protect the service from misuse and unexpected cost, we record each attempt to use a code: the code, the time, what happened (for example “check run”, “wrong code” or “blocked”), and two values made from your connection and your browser. These are one-way scrambled versions of your internet address and of a random identifier kept on your device (see the cookies section), so we do not store the address or the identifier itself. We also keep a shortened form of the address with its last part removed (for example 203.0.113.x), so our team can recognise a busy connection. We use these records to refuse a second free check from the same device, to limit how many can be used from one connection in a day, and to block a connection or device that is being misused. Attempt records are deleted when they are 30 days old, and the record of a code, with its two scrambled values, when it is 12 months old. We do this because we have a legitimate interest in preventing misuse and controlling the cost of a free service, and in providing the check you asked for. You can object by emailing support@nextroles.org. While your check is running you may be offered an optional box to leave your email address. Nothing is sent to us unless you press its button, and we only email you if you also tick the separate box saying you are happy for us to. You can use the free check without doing this.

When we contact you about NextRoles

We sometimes contact people and organisations directly to tell them about NextRoles: for example adults looking for work, colleges, careers services, youth and employability organisations, and schools. We do not contact anyone under 18 directly, and we do not email individuals on personal addresses without their consent. For individuals we reply to public posts or messages on the platform they use, or send a message where they have invited it. For organisations and schools we use a contact the organisation has published for the purpose, usually a named role found on its own website, and we write to one person, with at most one follow-up. We keep a record of who we have contacted so that nobody is contacted twice by mistake and anyone who asks us to stop is never contacted again. It holds the person’s public handle or published work address, their name and role if they are public, the channel and date, whether they replied, which free scan code batch they were offered if any, and a short note, plus a one-way scrambled key that lets us recognise them later. We only add people to this record from information that is public or that they have given us. We use it because we have a legitimate interest in telling relevant people and organisations about a service that may help them, balanced against your rights, and we rely on consent where the law requires it. You can object, ask us what we hold, or ask us to stop or delete it at any time by emailing support@nextroles.org. We will stop straight away. If you ask us to delete the record, we remove your details and keep only the scrambled key and a note not to contact you, so that you are not contacted again. We review this record regularly and delete entries we no longer need. We do not sell or share it.

Sensitive information

Do not include health information, identity documents or other sensitive details unless genuinely necessary. Free-text CVs and support reports may nevertheless contain such information. School-managed reporting and any decision about keeping a record remain subject to the school's policies and lawful basis. NextRoles is not an emergency service.

Storage and deletion

Saved application history is capped at the 15 most recent records per account. Experience log and tracker retention is described under their own headings above. CVs, profiles, account details and audit records remain while needed to provide the service or meet an applicable legal or accountability need. A verified “delete my data” request has a 24-hour cancellation window before live application, CV and profile data is erased. Account closure has a 30-day cancellation window before the account and associated live data are removed. Connected Google or Microsoft sign-in details are removed when you disconnect them or delete your account. Database recovery copies age out within the configured seven-day backup window. Some report, access-audit or legal records may be retained where deletion would conflict with a legal obligation, an active investigation or the school's documented instruction.

Your choices and rights

Depending on the circumstances, data-protection rights include access, correction, erasure, restriction, objection and portability. Where consent is the basis, it can be withdrawn for future processing. Contact support@nextroles.org to make a request. You can also raise a concern with the Information Commissioner’s Office.

Data & AI use

What is sent for AI processing

When you ask for a job check, CV rewrite, cover letter, suggested application answer, interview practice or skills enrichment, the text and files needed for that request are extracted and sent to the configured AI service. This can include CV content, the advert, your prompt and relevant saved skills context. Do not submit information that is unnecessary for the task. A free scan code works the same way for its one check, except that nothing is saved on our side afterwards (see Free scan codes in the privacy notice).

Optional voice interviews

Voice interviews are off unless NextRoles switches them on for your school or account. They are practice calls with an AI interviewer, not a real person. You are asked to agree before the first call. Your browser turns your speech into text using its own speech service (see Optional speak-to-type above), so NextRoles never receives or stores your audio, and you can always type instead. The words you say, as text, are sent to our AI provider to write the interviewer's replies and your feedback, together with the job advert and CV you chose. The interviewer's replies are sent as text to a text-to-speech provider, which turns them into the computer-generated voice you hear; if that is unavailable your browser's own voice is used. We keep the written transcript, your feedback and your score for your latest three calls only, and just the fact that older calls were completed (which is what unlocks the next interviewer). You can delete the saved words at any time with the “Delete my saved interview words” button on the interviewer page, or by deleting your account. If you say something during a call that suggests you may be at risk of harming yourself or being harmed, the call stops straight away and you are shown a message to take a break, with free support you can call or text, including the Samaritans, Childline and Shout. Your account is also paused for 10 minutes so you can step away; it switches back on by itself. The conversation is held for up to seven days and a flag is raised so that a person can check on you: for school accounts it goes to your school's admins (or the teacher or safeguarding staff they hand it to), and for all other accounts it goes to NextRoles staff. The checks that spot this include an automatic safety check of what you say, which uses our AI provider's moderation service. If someone swears at, insults or threatens the interviewer, they get one polite warning for mild swearing, and the interview ends straight away for heavier abuse, with no feedback and a flag on the account (to the school's admins for a school account, otherwise to NextRoles staff). If you say you are unwell or feeling low during a voice interview (for example a headache, or that you feel depressed or anxious), the interviewer pauses to check you are okay and offers a break or to stop; for a school account, saying you feel low also raises a low-priority flag for your school's admins. The same safety check, short break and flag apply to what you type in a chat interview, and for school accounts the questions and answers of a chat interview get the same after-the-event safeguarding review. After every call, a second automatic AI check reads the conversation for anything a school would want a person to look at, such as someone being at risk of harm or being pressured, threats, unsuitable content, private details being shared or the interviewer behaving badly. This is a signal for a person to look at, not a decision. If you use NextRoles through a school (a student account, or an account set up by a teacher), a concern is passed to your school's admins (or the teacher or safeguarding staff they hand it to) as a flag containing a short excerpt of the words that caused it, not the whole conversation, in the same way as flags on job checks and help questions. A flagged conversation is also held for up to seven days, outside the three-call limit, so the people reviewing the flag can read it. If they ask for more context, or nobody has acted on the flag within 48 hours, NextRoles staff can read it too. Each time it is opened is recorded. NextRoles can choose to keep a flagged conversation for longer where safeguarding or the law requires it. Accounts that are not linked to a school are not flagged to anyone. Please do not say addresses, phone numbers or private details about other people.

Speak-to-type is not AI processing by NextRoles

Dictated words are converted by your browser's speech service, not by NextRoles or our AI provider. Once the words are in a box they are handled like typed text, including being sent for AI processing if you then ask for a check or draft that uses that box.

What AI does and does not do

AI produces drafts, comparisons and coaching. It does not verify that an employer or opportunity is genuine, certify a placement, make a school decision, submit an application, contact an employer or make a recruitment decision. Automated outputs can be wrong or biased and must be checked by the user. School staff remain responsible for their own review and decisions.

Limited automated flags

The service may create a review flag when submitted text contains a narrow, explicit signal such as a request for upfront payment, unusual personal-document demands, secrecy from a parent or teacher, or direct contact through an informal messaging service. A flag is a prompt for human review, not a finding that a person or opportunity is unsafe. For a school account, flags and reports about a student can be read only by the people who review them: the school's admins, any one teacher a school admin has handed that flag to, and site administrators. Other teachers cannot see them. Ordinary job and work-experience applications continue through the normal application-support flow.

No sale or advertising profile

NextRoles does not sell CVs, application content or pupil data, and does not use that content to build advertising profiles. Data is shared with providers only to run the selected feature, operate the service and meet the purposes described in this notice.

Cookies & local storage

Sign-in cookie

nr_session is used to keep you signed in. The code sets a seven-day maximum lifetime, with Secure, HttpOnly and SameSite=Lax protections. Logging out clears the session cookie. Blocking it prevents normal account access.

nr_access is set for one hour when you enter a beta access code that is accepted, so the sign-up page knows the code was good. nr_scan_dev is set only when you use a free scan code on the free scan page. It holds a random identifier, not your name, email or any account detail, lasts 12 months, and has Secure, HttpOnly and SameSite=Lax protections. It is used only to give one free check per person and to protect the service from misuse, as described under Free scan codes in the privacy notice. It is not used for advertising or to follow you across other sites. Blocking it may mean a free check is not available to you. Clearing site data removes it.

Google and Microsoft sign-in

nr_oauth lasts up to 10 minutes and nr_oauth_confirm up to 15 minutes. They only exist while you are signing in with Google or Microsoft, they protect that sign-in from being tampered with, and they are removed when it finishes. When you press a Google or Microsoft button you go to that company’s own page, which uses its own cookies.

Preferences and CV drafts

nextroles-accessibility remembers the display settings you choose on this device. nextroles-cv can hold a saved CV draft, and nextroles-cv-handoff temporarily transfers CV-building information between pages. Local storage has no automatic browser expiry; the handoff value is removed when consumed. Avoid saving sensitive work on a shared device. Clearing site data removes local preferences and drafts and may sign you out; it does not delete server records.

Translation and external resources

The optional translation control loads a third-party translation service and may use cookies or browser storage that service sets. Our pages also load web fonts from a third-party font service. These requests go from your browser directly to those services, so, as with any website, they can see your IP address and browser details. If you press “Speak instead”, your browser may also contact its own speech service (see Optional speak-to-type above).

Payments

When you buy a plan you are taken to our payment provider’s page, which uses its own cookies and similar technology for security and fraud prevention. NextRoles sets no extra cookies for payments.

Website analytics

We use privacy-focused analytics to measure page visits, app sections viewed and selected button clicks or form submissions, using page titles and fixed action labels. This runs for everyone: it uses no analytics cookies, no advertising or cross-site tracking, and sends no form contents, CVs, passwords or account identifiers. URL query strings and fragments are excluded, apart from a short label for where a waitlist visit came from, such as “instagram”. When you first visit, we also ask whether we may measure page speed and load times. That part only runs if you choose Yes. Your choice is saved in a small preference cookie, nr_consent, for 12 months so we do not ask again, and you can change it at any time: change cookie settings.