Contribute with clarity.
How Wages.fyi handles your reports, account and consent. Updated October 28, 2026.
Anonymous reporting
No name, email or account is required to submit a salary. Private free-text context is stored separately from the canonical source record. Approved reports appear only in sufficiently sized aggregate cohorts. Employers receive no contributor contact information, identities or verification documents.
Separate licensing consent
Anonymous aggregate reporting and paid dataset licensing have separate consent controls. Licensing is optional. You can withdraw licensing consent with the deletion & consent token in your receipt. Contributor data is currently excluded from commercial exports. Withdrawal affects future use; we do not promise to recall material previously delivered under valid consent.
Verification images
Verification image uploads are not currently available on this site. Salary reports can be submitted without verification documents.
Retention and deletion
Your receipt contains private tracking and deletion tokens. Use the tracking token to check moderation status. Use the deletion token to delete the report and any attached verification images, or to change licensing consent. Deletion removes the canonical report and recalculates affected aggregate statistics. Deletion applies to active platform records. Backup retention terms have not yet been published.
Accounts and authentication
Optional account emails are private. Passwords are stored as salted, one-way hashes, never as readable passwords. Sessions use expiring opaque tokens in secure HTTP-only cookies in production. Administrative and organization access is role-controlled, and exports and verification access are audited.
Optional first-party analytics
Analytics is off until you choose Allow analytics. After that choice, secure first-party HttpOnly cookies distinguish a browser for up to 90 days and an analytics session for 30 minutes, renewed when a signed token is refreshed. JavaScript stores only your allow/decline preference locally; visitor identifiers and signed event tokens are not stored in local or session storage. A short-lived signed token authorizes events. We record a sanitized public page path, event type, timestamp, random event ID and a coarse acquisition label such as Google, ChatGPT or direct. The landing-source label is retained within a session. Full referrer URLs, hostnames, queries, search text, private report links and form values are not analytics data. Application analytics does not retain raw IP addresses or user-agent strings. Infrastructure and security processing is separate.
Your choice and measurement limits
The site works whether you allow or decline analytics. Use the preferences below to turn analytics off and clear its browser cookies. This stops future collection from this browser; it does not remove previously recorded aggregate measurements. Do Not Track and Global Privacy Control override an opt-in. Known bots, detected automation and test/operator visits are excluded where detectable. Browser estimates are not counts of unique people: shared devices, multiple browsers, cookie deletion and consent choices change the results. Old raw event counts remain unverified; we do not infer historical unique visitors or retroactively label old traffic as human. Analytics cookies expire after the periods above; event records do not currently have an automatic deletion schedule.
Accounts, requests and security
Saved items, employer listing requests and workplace experiences are associated with your optional account. You can remove your own items from My saved items. Contact forms store the information you explicitly provide and your contact consent. Email delivery is not currently active. Rate limits use hashed address buckets rather than keeping raw addresses as application records. Operational requests and security controls work independently of optional analytics.
Manage a report
Keep your receipt private. Tokens grant access to a report’s status or deletion controls. Visit report management to use them.