Privacy

First Shift is a directory of clinical experience opportunities. This page describes the information we collect and how we use it. We do not sell personal information or show ads.

What we collect

If you browse without an account, we store an anonymous session cookie named fs_session. It lasts one year, is httpOnly, and is used only to understand searches, listing views, and similar actions on this site.

If you sign in, we store your email address and an optional display name. Depending on how you use the site, we may also store saved positions, application tracking, reviews, and problem reports you submit.

We keep first-party event logs (for example search, listing viewed, apply clicked). These stay in our database. We do not use Google Analytics, advertising pixels, or other third-party analytics SDKs.

How we use it

We use this information to run the directory, keep you signed in, send sign-in links, show your saved items and applications, moderate reviews and reports, and improve the product.

Schools

If you sign in with a school email address we recognize, your account is linked to that school. That link lets you see opportunities the school has shared with its own students, and it is why we store which school your address belongs to.

Administrators at your school see totals, never a list of names: how many students signed up, how many searched, applied, heard back, or started a role, which organizations students applied to, and what students searched for and did not find. Any total that would describe fewer than five students is hidden rather than shown, because a number that small identifies people instead of describing a group.

You can also choose to share your activity by name, from your Account page. That shows your school your name, email, graduation year, and the roles you applied to and started, so an advisor can reference concrete experience in a committee letter. It is off unless you turn it on, it applies to one school, and you can turn it off at any time. Private notes you write on your own applications are never shared with your school, whatever you choose here.

To be clear about the relationship: First Shift is a product you choose to use, not a vendor your school hired, and we do not receive student records from any school. If that ever changes we will say so here first.

Who processes it

The site is hosted on Vercel. Accounts and the database are hosted on Supabase. Sign-in emails are sent by Resend from noreply@firstshift.app. A crawler that collects public listing pages runs on Railway. These providers process data only to provide their services to us.

Cookies

Besides fs_session, sign-in uses cookies set by Supabase Auth. We do not use cookies for advertising.

Contact

Questions: hello@firstshift.app. You can delete your account from the Account page. We operate from the United States.