What this site collects, which cookies it sets, and how to change your mind. Written by the person who built the site, in plain language, because the audience here reads these pages properly.
This site sets no analytics cookie until you allow it, keeps everything you type into a tool in your own browser, and collects personal data only through forms you fill in on purpose. There is no advertising, no cross-site tracking, and nothing is sold or shared for marketing. Google Analytics is used to see which pages and tools get used, and it runs cookieless unless you say otherwise.
Like every website, this one is served by a hosting company that writes a standard access log: the address a request came from, the page asked for, the time, and the browser type. That log lives on the host's servers in the United States, is used only to keep the site running and to investigate abuse, and is not combined with anything else.
Beyond that, page views are counted by Google Analytics. How much it can see depends on the choice you make in the banner, which is covered in the cookies section below.
The site also keeps its own count of inbound clicks so I can see which posts, emails and links send people here. It only notes a visit that arrives from a tagged link, a christinecastro.com/go/ short link, or another website, and it records the time, the page you landed on, the campaign tags in the link, the site that sent you, your device type, browser and operating system, your browser's time zone and language, and the width of the window. It does not record your IP address, set a cookie, or give you an identifier, so it counts clicks rather than people and cannot follow you from one visit to the next. The count is kept on this site's server, with a nightly copy in my Google Drive, and is deleted after 14 months.
The GTM Alignment Diagnostic, Founder Diagnostic, Budget Scoping model, Pipeline Coverage Calculator, Win Report Builder, Building a Marketing Team comparator, Hiring Scope Builder and Event ROI Planner all compute in your browser. The revenue targets, win rates, headcount plans and everything else you enter stay on your device. The Excel and PDF exports are generated there too, so the file you download was never on a server.
A few tools use your browser's own storage so you do not lose work between visits. That is storage on your device, not a cookie, and it never travels to the site:
Clearing your browser's site data for christinecastro.com removes all of it. Analytics records that a tool was used, which mode it was in, and that an export was made. It does not receive the contents of the tool.
Everything else on this site can be used without telling me who you are. These seven forms are the exception, and each one exists so I can do something you asked for. Site search and Ask CiCi, which do not ask who you are, are described after them.
You give a first name, last name, email address, and the filters you want the daily email built from: functions, seniority, regions, workplace, keywords, investors. The subscription is confirmed opt-in, so nothing is sent until you click the link in the confirmation email. Every digest carries a one-click unsubscribe, which removes you immediately.
The subscriber list is held on the site's server and mirrored to a Google Sheet I use to manage the list. Your IP address is not stored; a one-way hash of it is kept to limit abuse of the signup form and cannot be turned back into the address.
You give your name, email, company, what the request is about, and optionally how you found the site. The request is emailed to me and appended to a log on the server so I can find it again. Because this form is the one most exposed to automated abuse, the requesting IP address is stored with it.
You give a first name, last name, email address, and your resume as a PDF or Word file, plus where you want to work and which employment types count. This is the one tool on the site that does not run only in your browser, because reading a resume against hundreds of job postings needs a server. Your resume is stored privately in order to be read by an AI model, Anthropic’s Claude, which produces the assessment. Your browser reads the text out of the file. The original file is kept in a private Google Drive folder that only I can open, and the text is held on this site’s server in a password-protected area while the assessment runs, or for up to two days if a run is abandoned partway.
The text is sent to Anthropic’s Claude API for that reading, and the job descriptions it is compared with are read from the companies’ public job postings. When the assessment finishes, the resume text is removed from the server and only the results are kept. A row recording the run (your name, email, the file link, and the top match) is kept in a Google Sheet with the Drive folder. Nothing is shared with employers, recruiters, or anyone else, and nothing is used to build a candidate list. A one-way hash of your IP address is kept for the day to limit abuse.
If you add a link to a job posting, the page at that link is read by the server and its text is sent to Claude along with your resume so the assessment can start with that job. If you paste a job description instead, that text is sent the same way and is not published. When the posting is open, is a go-to-market role at a cybersecurity company and sits on a known hiring platform or the company’s own site, the company name, job title, location and link are added to GTM Radar. Nothing about you is added with it, and the link you gave is not connected to your name or email on the board. Postings that do not pass those checks are held in a private review list and are not published.
The ATS Readiness Score is worked out on the server from the structure of the file you uploaded, such as tables, columns and headers, and by comparing your resume text with the terms in the job postings. Your resume text is not sent anywhere for that comparison. Only the score and the list of issues are kept, with your results, for 90 days.
If you tick the digest box, the same details go through the GTM Digest signup described above, confirmed opt-in like any other signup.
You give a term, a definition, a category, and an email address if you want credit or a reply. Suggestions are held for review and are not published until I have edited them. A one-way hash of your IP address is kept to limit abuse.
There are two ways in. Anyone can tip a role from the Hiring Landscape with a company, title, location and posting link, plus optional notes and an email address. Employers can post a role on the Post a Job Opportunity page, which also asks for your name, your role and a work email, along with details about the role and the company. Submissions are held in a private review queue outside the public part of the site and are not published until I have checked them. If you posted as an employer, you get one email when the role goes live. Your name and email are never shown on the board or stored with the published role. A one-way hash of your IP address is kept to limit abuse.
The contact form inside Ask CiCi asks for your name, email, optionally your company, what the message is about, and the message. It is emailed to me with your conversation with CiCi underneath, so you do not have to repeat yourself, and kept in a log on the site's server and in a Google Sheet I use to follow up. A one-way hash of your IP address is kept for the day to limit abuse.
Organizers give their name, role, work email and organizing company, along with the event’s dates, venue, audience, attendance, pricing and links. The event details are published after review. Your contact details are held in a private review queue outside the public part of the site, are never published, and are used only to follow up about the submission. A one-way hash of your IP address is kept to limit abuse.
The search box in the menu looks things up in an index of this site's own pages, glossary, events and GTM Radar companies. What you type is logged with the page you searched from and the number of results, so I can see what people look for and what the site is missing. No IP address, cookie or identifier is stored with a search.
Ask CiCi, the assistant in the lower right corner, is an AI assistant, not me. Your question, the earlier turns of the same conversation and the matching excerpts from this site are sent to Anthropic's Claude API to write the answer. The question and the answer are logged on this site's server with the page you asked from, the site or campaign that brought you here, and a random conversation number your browser makes up, so I can see what people ask and which questions the site does not answer yet. No IP address is stored with them; a one-way hash of it is kept for the day only to stop a flood of questions. The conversation itself stays in your browser tab and is gone when you close it. Please do not type anything sensitive into it. The logs are kept for 14 months.
Booking time through the calendar link on the contact and Work With Me pages takes you to Calendly, which has its own privacy terms. Nothing about the booking comes back to this site.
This site runs Google Analytics through Google's consent mode. Until you make a choice, and whenever you decline, Analytics runs in a cookieless state: it can count that a page was loaded and that a tool was used, but it sets no cookie and keeps no identifier that connects one page view to the next or one visit to another. Choose Allow analytics and Google sets its normal cookies, which let it tell a returning visitor from a new one and see which pages were read in a single visit.
Here is the full list. There is nothing else.
| Cookie | Set by | Purpose | Lasts | Needs consent |
|---|---|---|---|---|
| cc_consent | This site | Records the choice you made in the banner so it is honoured on every page and the banner does not come back. | 1 year | Necessary |
| _ga | Google Analytics | A random identifier that lets Analytics tell a returning visitor from a new one. Set only after you allow analytics. | 2 years | Yes |
| _ga_Y90PKDR3DB | Google Analytics | Keeps the state of the current visit for this site's Analytics property. Set only after you allow analytics. | 2 years | Yes |
A Google Tag Manager container also loads on each page. It reads the same consent state, so anything it runs is held to the same rule: nothing that stores an identifier fires until you allow it. Analytics data is retained by Google for no longer than 14 months and is not shared with other Google services for advertising.
Changing your mind is one click: the Change your cookie choice control at the top of this page reopens the banner. Choosing Decline after having allowed analytics also deletes the two Google cookies straight away, rather than leaving them to expire.
Loading a page here makes your browser fetch a few things from other companies. Each of them sees your IP address and browser type in the ordinary course of serving a file, and nothing more from this site:
On the server side, digest subscriptions are mirrored to Google Sheets. Resumes uploaded to the Resume Fit Assessment are stored in Google Drive and read by Anthropic’s Claude API, and Ask CiCi questions are answered by the same API, as described above. Role, job and event submissions are reviewed on a password-protected page on the site’s own server. Nobody else receives personal data from this site. There are no data brokers, no enrichment services, and no advertising platforms.
You can use nearly all of this site without identifying yourself, and you can decline analytics with no loss of function. If you have given me personal data through one of the forms, you can ask to see it, correct it, or have it deleted by emailing christine@christinecastro.com from the address you used. I answer within 30 days and usually within a couple of business days. Digest subscribers can remove themselves instantly with the unsubscribe link in any email.
If you are in the European Economic Area, the United Kingdom or Switzerland, the rights above are the ones the GDPR and the UK GDPR give you, and you also have the right to complain to your national supervisory authority. If you are a California resident, this page is the disclosure the CCPA asks for: this site does not sell or share personal information, and the categories collected are the ones described above.
This site is not directed at children under 16 and does not knowingly collect their data.
When something material changes, the date at the bottom moves and a line is added to the log below. The page describes what the site does today, not what it might do later.
No analytics cookie is set until you choose Allow analytics. Before that, and if you decline, Analytics runs cookieless and records only aggregate counts. The single cookie set without asking is cc_consent, which records your choice so the banner does not reappear.
They stay in your browser. The tools compute on your device and the exports are built there. Nothing you enter into a tool is sent anywhere unless you separately fill in a form.
Because the tools are the point of the site and I need to know which ones get used, which modes people pick, and where they leave. That is the entire use. Nothing here is sold, and there are no ads to optimise.
Use the Change your cookie choice control at the top of this page. It reopens the banner. Declining after having allowed analytics also removes the Google cookies that were set.
Email christine@christinecastro.com from the address you used. Digest subscribers can also use the unsubscribe link in any email. Requests are handled within 30 days, usually much faster.
It is stored privately in order to be read by Christine Castro’s AI assessment model, which runs through a third-party AI provider. The provider is named in the Resume Fit Assessment section above. It is not shared with employers, recruiters or anyone else. The file and your results are deleted automatically after 90 days, and the delete link in your results email removes both straight away.
No. CiCi is an AI assistant that answers from this site's own content through Anthropic's Claude API. Questions are logged without IP addresses to improve the site. If you want to reach me, the Contact button in the chat sends me a message with your conversation attached.
No. Digest subscriptions, resume requests, uploaded resumes and form submissions are seen by me alone. They are not passed to any company I work with or apply to.