Choose what becomes public.

Professional profiles and résumés

The Talent form uses a short public intro and does not ask you to upload a résumé. Share résumés privately through the City of Hats mobile app. Any PDF previously attached to CyberSSS remains restricted to its owner and authorized reviewers; deleting its profile deletes the attachment. Unattached legacy uploads are removed during upload processing after 24 hours.

Account data

CyberSSS stores your username, a password hash, a recovery-code hash, secure session records, account-owned listings and saved listings. Passwords are not stored as plaintext. Sessions use secure HttpOnly cookies and are not shared with City of Hats.

Public and private listings

Drafts and submissions are visible to their account owner and authorized reviewers. Approved published listings expose the fields you choose to publish, including a contact Hat. This publicly associates the Hat with that profile. Avoid exact home addresses and private CV files.

Payments

Stripe collects payment and billing details in its checkout. CyberSSS retains publication order references, amounts, payment state and publication periods. Card details stay with Stripe. Billing data is not included in public listings.

City of Hats contact

The contact page displays the listing’s public Hat ID, a copy button and links to City of Hats on the App Store and Google Play. Copy the Hat ID and add it in the City of Hats mobile app. Viewing the page or copying the ID does not create a channel or send a message. CyberSSS does not receive Hat passwords, passphrases, encryption keys or private conversation contents. Share private résumés and proposals in the mobile app.

Security and review records

The service records account and publication actions and uses limited request information to prevent abuse. The web host may retain request logs. Review notes describe checks and must not include private messages, credentials or identity-document copies.

Operational notifications and visit signals

CyberSSS sends operational alerts to a private Slack channel accessible to authorized operators when an account is created or a Talent profile is submitted for approval. These alerts include the CyberSSS username and event type, plus an admin-page link for submissions. They do not contain passwords, recovery codes, résumé contents or private messages. Slack processes these alerts as a service provider.

A visible page visit sends a browser-visit signal. The server uses a keyed digest of the network address and browser user-agent to suppress repeat alerts until 30 minutes of inactivity. Raw addresses and user-agent strings are not stored in this deduplication table or sent to Slack. Old digest entries are removed as new visits are processed. Visit alerts contain the event type and time, not a verified identity or unique-person count. Operational event and delivery records are retained for administration and troubleshooting; web-host request logs are separate.

Help, reports and privacy requests

Email admin@cybersss.com for account help, to report a listing or to ask about your personal information. Include the relevant listing link or your CyberSSS username. Never send passwords, recovery codes or City of Hats passphrases.

Your controls

Edit or remove your publications in My listings. Change your password or sign out in Account & security. Recovery uses the private code shown once during registration. Earlier browser-only drafts remain in that browser until you remove them. Necessary billing and review records are retained separately from public content.

Public information

Public listings may be copied or cached by visitors. Removing a listing stops its display on CyberSSS but cannot recall copies others have made.