Jul 18, 2025 – Got an unpaid technical assessment (Kubernetes: second NGINX controller). Jul 22 – Was told I “passed” and was asked to upload front/back passport/ID scans and a selfie video through a public Google Form before any contract was provided. Jul 24 – I asked for a contract first and a GDPR Article 13 notice; they insisted I fill the form first (said I could blur sensitive parts). Jul 25 – Offer was $30–40/hour but under a “Tracker off / Project-based” policy: “If ETA is 8h and you need 200h, you still get paid 8h.” No escrow / payment guarantee, yet fixed 8–17 CET working hours for a “contractor”. I declined and requested erasure of my data under GDPR (which they confirmed, but with inconsistencies about processors and no clear Article 9(2) basis for the selfie video).