Who We Are
H1BTrack ("we", "us", "our") is a free public information tool that aggregates and presents publicly available US government H-1B visa data from the Department of Labor (DOL) and US Citizenship and Immigration Services (USCIS). The site is operated from the United States.
This Privacy Policy explains how we handle personal data when you visit h1btrack.com and any subdomains. It does not apply to external websites we may link to.
For EU/EEA-specific rights, see our dedicated GDPR Rights page. For cookie-specific information, see our Cookie Policy.
Data We Collect
We collect the minimum data necessary to run the site securely and improve it over time.
Automatically collected (all visitors)
When you visit H1BTrack, our servers and Cloudflare automatically log:
- IP address — used for security, rate-limiting, and abuse prevention. Truncated before any analytics processing.
- Browser type and version — used to ensure compatibility.
- Operating system — same purpose as above.
- Referring URL — the page you came from, if any.
- Pages visited and timestamps — to understand aggregate usage patterns.
- HTTP response codes — to detect errors.
None of this data is linked to your name or identity. Server logs are retained for 90 days then automatically purged.
Contact form submissions
If you use our contact form, we collect your name, email address, and message content. This data is used solely to respond to your enquiry and is not added to any marketing list.
Analytics (with consent)
With your consent, we use Plausible Analytics — a privacy-first, EU-hosted tool that collects fully anonymised, aggregated page-view data. Plausible does not use cookies, does not fingerprint browsers, and does not track users across websites. No personally identifiable information is collected or stored.
Data we do NOT collect
How We Use Your Data
We use the data we collect only for the following purposes:
- Security & abuse prevention — detecting bots, rate-limiting requests, and blocking malicious traffic (legal basis: legitimate interests).
- Site operation — serving pages correctly across browsers and devices (legal basis: legitimate interests).
- Responding to enquiries — replying to contact form messages (legal basis: contract / legitimate interests).
- Analytics — understanding aggregate usage to improve the site, only with your explicit cookie consent (legal basis: consent).
- Legal compliance — retaining logs to respond to lawful requests from authorities where required (legal basis: legal obligation).
We do not use your data for advertising, profiling, automated decision-making, or any purpose not listed above.
Data Retention
After the applicable period, data is either deleted or anonymised beyond any reasonable re-identification.
Third-Party Services
We use a small number of carefully chosen third-party services. All are bound by data processing agreements or standard contractual clauses for EU data transfers.
We do not use Google Analytics, Meta Pixel, or any other behavioural tracking or advertising network beyond the above.
H1B Company Data
The H-1B data displayed on H1BTrack — including employer names, job titles, wage levels, and approval counts — is sourced entirely from publicly available US government records: the Department of Labor (DOL) LCA disclosure data and USCIS I-129 petition records.
If you believe data relating to you has been incorrectly attributed or you are an individual whose personal data appears, please contact us and we will review your request.
GDPR — EU, EEA & UK Residents
If you are in the European Union, European Economic Area, or United Kingdom, you have specific rights under the General Data Protection Regulation (GDPR) and the UK GDPR:
- Right of Access (Art. 15) — obtain a copy of personal data we hold about you.
- Right to Rectification (Art. 16) — correct inaccurate or incomplete data.
- Right to Erasure (Art. 17) — request deletion of your data ("right to be forgotten").
- Right to Restrict Processing (Art. 18) — limit how we use your data while a dispute is resolved.
- Right to Data Portability (Art. 20) — receive your data in a structured, machine-readable format.
- Right to Object (Art. 21) — object to processing based on legitimate interests.
- Right to Withdraw Consent (Art. 7) — withdraw cookie or other consent at any time without affecting prior lawful processing.
For detailed guidance on exercising each right, visit our GDPR Rights page. To submit a request, contact us — we respond within 30 days.
H1BTrack is operated from the United States. Data transfers to the US are covered by Cloudflare's Standard Contractual Clauses and participation in the EU-US Data Privacy Framework. Plausible Analytics is EU-hosted and data does not leave the EU.
If you are unsatisfied with our response, you have the right to lodge a complaint with your supervisory authority — for example, the ICO (UK) or DPC (Ireland).
CCPA — California Residents
If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) grant you additional rights:
- Right to Know — request disclosure of the categories and specific pieces of personal information we collect about you, the sources, the business purpose, and any third parties it is shared with.
- Right to Delete — request deletion of your personal information, subject to certain exceptions.
- Right to Correct — request correction of inaccurate personal information.
- Right to Opt Out of Sale / Sharing — we do not sell or share personal information for cross-context behavioural advertising. This right is therefore not currently applicable.
- Right to Non-Discrimination — exercising your CCPA rights will not result in any difference in service.
To submit a CCPA request, contact us. We will verify your identity and respond within 45 days (extendable by a further 45 days with notice).
Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include:
- TLS encryption for all data in transit (HTTPS enforced site-wide)
- Cloudflare DDoS protection and Web Application Firewall
- Rate-limiting on all public endpoints
- Access controls limiting who can access server infrastructure
- Regular review of third-party service data processing agreements
No method of internet transmission or electronic storage is 100% secure. In the unlikely event of a data breach that affects your rights or freedoms, we will notify affected individuals and relevant authorities as required by law.
Children's Privacy
H1BTrack is a professional tool intended for adults. We do not knowingly collect personal data from children under 13 (or under 16 in the EU/EEA). If you believe a child has submitted personal data to us, please contact us and we will delete it promptly.
Policy Changes
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. For significant changes, we may also display a notice on the site.
Continued use of H1BTrack after a policy update constitutes acceptance of the revised policy. If you disagree with changes, please stop using the site and contact us to exercise any applicable data rights.
Previous versions of this policy are available on request.
Contact Us
For any questions about this Privacy Policy, to exercise your data rights, or to report a concern: