Privacy
What Milo knows, and what it refuses to.
Plain language, no legal theatre. This describes how the product is built, not a set of promises about laws we are not qualified to interpret for you.
Recorded on a resume view
- Timestamp of the view
- An anonymous session ID, scoped to one resume
- Device category, desktop, mobile or tablet
- Browser and operating system
- Referrer domain, e.g. linkedin.com
- UTM parameters you added to your own link
- Which page of the resume was on screen
- Roughly how long each page was open
- Whether the PDF was opened and whether it was downloaded
Never recorded
- IP addresses shown to you, or stored longer than a request needs
- City, country, or any location derived from an address
- GPS or precise location
- Names, emails, or LinkedIn profiles of viewers
- Device fingerprints
- Tracking across other websites
- Camera, microphone, or browser history
Who this page is for
Two groups of people are involved when a Milo link is opened: the candidate who created it, and the visitor who opens it. This page is for both.
The visitor never agreed to anything. That constraint shapes every decision below.
Why anything is collected at all
A candidate sharing a resume cannot tell a role that ignored their application from one that read it three times. Milo exists to answer that question and only that question.
So the rule is: collect what is needed to describe how a document performed, and nothing that describes the person reading it.
Anonymous sessions
When a resume link is opened, Milo creates a random session identifier. It is scoped to a single resume, it is not derived from anything about the visitor or their device, and it cannot be linked to a session on any other resume or any other site.
The session exists so that one person refreshing a page is not counted as four different viewers. That is its whole purpose.
Location
Milo does not perform IP geolocation, does not request GPS permission, and does not display or store city or country. There is no location field anywhere in the system.
IP addresses
Like every web service, Milo's servers receive an IP address with each request; it is how the internet delivers a response. Milo does not show it to the resume owner, does not use it to derive location, and does not keep it as part of the analytics record.
Where an address is needed to limit abuse, it is hashed with a rotating salt so the value cannot be reversed or correlated across days.
Retention
Analytics events are kept while the resume exists in your account. Deleting a resume deletes its events and sessions.
Milo is in private beta and the retention window may tighten before launch. It will not loosen without this page changing first.
Your resume file
Milo stores the URL you provide and metadata about it. The PDF itself stays with whoever already hosts it. Milo does not copy it into its own storage.
That also means anyone with the original URL can still reach the file directly. Milo adds analytics; it is not access control.
This marketing site
The page you are reading now runs no analytics, no tag manager, and no third-party scripts. The only data it collects is an email address, and only if you type one into the waitlist form.
That email is used to send one message when Milo opens up. Reply and ask, and it is deleted.
Questions about any of this? Join the waitlist and reply to the first email, it reaches a person.