Icarus recruiter ratings

People who use the Icarus mail app can choose to share how a recruiting company treated them. Icarus then shows others what was reported, to help them spot fake job offers. The service is part of a paid Icarus account.

What is collected

• The company's web domain (for example example.com), never a person's name.
• Stars from 1 to 5, and reasons picked from a fixed list. There is no free text.
• A one-way scrambled form of a random key made by each copy of Icarus, so each person counts once and can change or take back their rating.

Not collected: email addresses, messages, or IP addresses. IP addresses are used only briefly, in memory, to limit how many requests one place can send. Requests carry the account's access key, so the service can tell which requests come from which account.

What is shown

A new rating counts only after two days, and nothing is shown about a company until at least three people have rated it. After that, Icarus shows the number of people, how many people picked each reason, and the average stars once at least three people gave stars. These are people's reports of their own experience, not findings of fact. Only ratings from mail that the recipient's own mail server confirmed came from the company can be given.

For companies

A company can post one public statement, shown beside its ratings as the company's own words. Icarus does not check it. To prove it runs its domain:

1. Send POST /v1/claim with {"domain": "example.com"}. The answer contains a code.
2. Publish a DNS TXT record on the domain: icarus-ratings=<code>.
3. Send POST /v1/reply with {"domain": "example.com", "code": "<code>", "text": "Your answer"} within seven days. Send an empty text to take the answer down.