cuelabs.cuesoft.io: Open-source Internships

Application form

• What: name, email, phone, GitHub username, portfolio link, the discipline and duration you applied for, university, course, level, country, start availability, your reasons for applying, and the CV you upload.
• Why: to assess and process internship applications.
• Where: records are stored in Airtable, our forms database.
• Legal basis: steps at your request prior to a contract (GDPR Art. 6(1)(b)).
• Confirmation: we email you a receipt with your CV attached, copied to cuelabs@cuesoft.io: see what every site collects.

Application decisions are made by humans.

Public GitHub data

The site displays contributors to our open-source products using GitHub’s public API: information those contributors have already made public on GitHub, shown with attribution. Purpose: crediting contributors and showing the provenance of our open-source work. Legal basis: our legitimate interest in accurate attribution (GDPR Art. 6(1)(f)). You may object: email hello@cuesoft.io and we will remove your public GitHub activity from our contributor displays.

Programme communication

Accepted interns join the CueLABS™ Discord community: see processors and platforms.

Analytics and advertising tags: opt-in only

This site uses analytics and advertising tags, gated behind a consent banner. None of them loads, and none of their cookies is set, until you press Accept (the cookieless Cloudflare measurement described in what every site collects and the performance and error monitoring below are separate and run either way):

• What they receive: a cookie or device identifier, your IP address, the page URLs you visit on this site and the referring URL, plus basic device and browser metadata and the page-view events themselves. Google Analytics uses the IP address in passing to derive an approximate location and then discards it: the address itself is not stored, and the location is what is kept. Google Analytics keeps this for 14 months: see retention. We do not send your form contents to any of them.
• One event beyond page views: when you submit an application, Google Ads, Meta, LinkedIn and X are told that it happened, so they can credit the ad you arrived from. Google Analytics is not: it receives the page views described above and nothing more. The event records the fact of the application and nothing else: not your name, not your email, not your phone number, and not what you wrote.
• If you are signed in to Google: we have Google signals switched on, so where you are signed in to a Google account that has Ads Personalisation enabled, Google may connect this visit to that account and combine it with what Google already holds there: location, search history, YouTube history and activity on sites that partner with Google. What that does, precisely: it lets us see age, gender and interest summaries, and it lets Google build advertising audiences that can reach you across your devices. It does not merge your devices together in our own reports (since February 2024 Google signals is not part of how Analytics counts users), so we do not see your phone and your laptop as one person. And Google uses the visit for its own ads personalisation as well as for our measurement. You control it on Google’s side, independently of us, at myadcenter.google.com and Google’s activity controls: switching Ads Personalisation off there stops it for every site, not just ours. Declining our banner prevents it entirely.
• Decline and none of them load. The site works identically either way.
• Withdraw any time via the site’s Cookie preferences link. Withdrawal stops the tags loading from that point on; it does not delete cookies already set (you can clear those in your browser). What happens to data already collected differs by provider: Google Analytics holds it as our processor, on our instructions, so the rights page reaches it. The exception is what Google signals feeds into Google’s own ads personalisation, which Google controls rather than us: manage that in your Google account. The four advertising platforms hold what they collected as independent businesses under their own policies: see processors and platforms.
• An opt-out preference signal (Global Privacy Control) overrides a stored opt-in for as long as your browser sends it.
• Legal basis: consent (GDPR Art. 6(1)(a)); California treatment is on the United States page.

Performance and error monitoring

This site loads Datadog’s browser monitoring. It is operational telemetry, so it does not wait for the consent banner, and declining the banner does not stop it: it measures how quickly a page loads and records the errors it hits, so that we can keep the pages working.

• What Datadog receives: the page addresses you visit and the page that referred you, load and resource timings, your clicks (which element, never anything you type), script errors and failed requests, your browser, device and operating system, and your IP address, from which it derives an approximate location. Nothing links a session to your name or email. No session is recorded as a replay, with one exception: if a page fails to render correctly, Datadog records that session as a replay so we can see what went wrong. A replay shows the page as it appeared to you, and the contents of form fields are masked.
• Cookie: one first-party session cookie, _dd_s_v2, holding a random session identifier that lapses after 15 minutes of inactivity (4 hours at most).
• Role and retention: Datadog acts as our processor, on our instructions, and keeps the data in the United States for no more than 30 days, under the safeguards on the transfers page; see processors and platforms and retention.
• Legal basis: our legitimate interest in keeping the pages working (GDPR Art. 6(1)(f)); you may object at any time.

What this site does not do

No payment data is ever requested: see the Terms of Service. Apart from the performance and error monitoring above, nothing loads before you accept, and the cookieless Cloudflare measurement described in what every site collects stays outside the consent gate because it sets no cookie.