Privacy Policy

Last updated: 1 September 2026

Introduction

Freelancers Luxembourg ("we", "us", "our") operates the website freelancers.lu. This privacy policy explains how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and Luxembourg data protection laws.

Data We Collect

We collect the following personal data when you use our platform:

Identity information: first name, last name
Contact information: email address, phone number
Professional information: skills, years of experience, daily rate, availability, location
Documents: CV/resume (PDF format)
Authentication data: email, password (encrypted), or third-party authentication data (Google, Microsoft)
Technical data: truncated IP address, device and browser type, pages visited, cookies (see the Cookies section)

Purpose of Data Processing

Your personal data is processed for the following purposes:

Creating and managing your user account
Connecting freelancers with recruiters and companies
Processing your application to join the network
Communicating with you about opportunities and platform updates
Improving our services and user experience

Legal Basis

We process your data based on: your consent (Article 6(1)(a) GDPR), the performance of a contract (Article 6(1)(b) GDPR), and our legitimate interests (Article 6(1)(f) GDPR) in operating and improving the platform.

Data Storage and Security

Your data is stored securely on our own servers (dedicated VPS) hosted in the European Union (Frankfurt, Germany). We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or alteration. Passwords are encrypted and CVs are kept on that same server, in secure storage.

Data Sharing

We do not sell your personal data. Your profile information may be shared with recruiters and companies registered on the platform for professional matchmaking purposes. We rely on the following processors, each limited to its purpose: Hostinger (server hosting, Frankfurt, Germany); PostHog Inc. (audience measurement, data hosted in the European Union, only if you accept it); Cloudflare (Turnstile, bot protection on the sign-in and sign-up forms; Workers AI, AI analysis of your CV to pre-fill your profile, only if you use the CV import — the file is not kept); Stripe (subscription payments, on payment pages hosted by Stripe); Mapbox (address suggestions when you type your location); Google and Microsoft (sign-in with your account, only if you choose this option). Where a processor is established outside the European Union, the transfer is governed by the European Commission's standard contractual clauses.

Your Rights

Under the GDPR, you have the following rights:

Right of access: obtain a copy of your personal data
Right to rectification: correct inaccurate data
Right to erasure: request deletion of your data
Right to data portability: receive your data in a structured format
Right to object: object to certain processing of your data
Right to withdraw consent at any time

To exercise your rights, contact us at: contact@freelancers.lu

Emails and communications

We distinguish service emails (account confirmation, profile status, moderation, applications, missions, billing — legal basis: performance of the contract) from optional emails: reminders to complete your profile (legitimate interest), mission alerts, guides and news, partner offers (consent). Every optional email includes an unsubscribe link and a link to manage your choices category by category; your choices and their date are kept as proof of consent. Sent emails are logged for support purposes.

Manage my email preferences

Cookies

A cookie is a small file stored on your device; browser local storage (localStorage, sessionStorage) is treated here in the same way as cookies. We use three families: strictly necessary cookies (sign-in, security, remembering your choices), functional cookies that record a preference you have expressed (language, theme), and audience measurement. We do not use any advertising cookies or social network trackers.

PostHog audience measurement is only enabled with your consent, given in the banner shown on your first visit. Your choice is kept for 6 months, after which we ask you again. You can change or withdraw it at any time with the same immediate effect: the data PostHog has already stored on your device is then deleted. Until you choose, or if you refuse, PostHog runs in "cookieless" mode: nothing is written to your device, and your IP address is only used to compute, server-side, a non-reversible daily identifier that is not stored.

Name	Purpose	Category	Duration
`sb-freelancers-auth-token (+ .0, .1…)` freelancers.lu · cookie	Keeps you signed in (authentication tokens).	Strictly necessary	400 days
`sb-freelancers-auth-token-code-verifier` freelancers.lu · cookie	Secures the sign-in flow (PKCE); removed once you are signed in.	Strictly necessary	Session
`fl_consent` freelancers.lu · cookie	Remembers your cookie choices.	Strictly necessary	182 days
`fl_admin` freelancers.lu · cookie	Administrator back-office session (team only).	Strictly necessary	12 hours
`__ph_opt_in_out_phc_x2N8…` freelancers.lu · cookie	Remembers whether you accepted or refused PostHog audience measurement.	Strictly necessary	182 days
`__cf_bm, cf_clearance` Cloudflare (Turnstile) · cookie	Bot protection on forms (sign-in, sign-up, forgotten password); set by Cloudflare on those pages only.	Strictly necessary	Set by the provider
`NEXT_LOCALE` freelancers.lu · cookie	Remembers the language you chose.	Functional (preference)	Session
`theme` freelancers.lu · localStorage	Remembers the light or dark theme.	Functional (preference)	Until you delete it
`profileEditorMode` freelancers.lu · localStorage	Remembers the profile editing mode you chose.	Functional (preference)	Until you delete it
`pv_sid` freelancers.lu · sessionStorage	Groups the page views of one visit for the internal statistic, without identification.	Exempt audience measurement	Session
`ph_phc_x2N8…_posthog` PostHog (UE) · cookie, localStorage	Pseudonymous identifier and session for PostHog audience measurement.	Audience measurement (consent)	182 days
`ph_phc_x2N8…_window_id, ph_phc_x2N8…_primary_window_exists` PostHog (UE) · sessionStorage	Tells open tabs apart for PostHog audience measurement.	Audience measurement (consent)	Session

We also keep an internal traffic statistic, without consent, under the "audience measurement" exemption: it is only used to produce aggregated statistics, the IP address is truncated before being recorded, no user identifier or full user agent is kept, the session identifier disappears when the tab is closed, and the data is deleted after 13 months.

Data Retention

Your personal data is retained as long as your account is active. If you request the deletion of your account, your data will be erased within 30 days, unless we are legally required to keep it. Internal (anonymised) traffic statistics are deleted after 13 months; PostHog audience measurement data is kept for at most 12 months; your cookie choices are kept for 6 months.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date.

Contact

For any questions regarding this privacy policy or your personal data, please contact us at: contact@freelancers.lu