Account protection
Local workspace authentication manages sign-in sessions in your browser. Passwords are stored only as salted hashes on this device. Optional Google sign-in uses a short-lived, state-protected OAuth handoff through the Cloudflare Worker; the client secret never reaches the browser. Use a unique password, protect access to your device, sign out on shared devices and download important documents before clearing browser data.
Workspace separation
Documents, drafts and job applications are stored under the signed-in local workspace identifier in browser storage. The site never sends those saved records to Firebase or a shared database.
Secrets and payment data
AI and payment credentials are kept in server-side environment secrets rather than exposed in browser code. Payment credentials and authorization prompts are handled by PesaPal and the selected payment channel.
Responsible disclosure
If you believe you found a security issue, do not access other users’ information or publicly disclose sensitive details. Send a concise report to support@slendercareer.com.
No system is risk-free
No online service can guarantee absolute security. SlenderCareer applies reasonable safeguards and updates them as the service evolves, but users should avoid uploading identity documents, financial credentials, medical information or other data that is not necessary for a career document.