FreelyForm

Patterns

A job application form collects personal data, and that raises the stakes.

A CV upload, three questions that predict fit, and a retention window you can state out loud.

Upload
multipart, enabled per form
Ceiling
5 files × 25 MB (default)
Allowlist
Per-form extension and MIME list
Retention
Attachments expire, record remains
Consent
State the retention period
Questions
Three, not ten

The upload is the form

Almost everything an application needs to know is in the CV, which means the form's real job is to get the file reliably, attach an identity to it, and ask the two or three questions a CV cannot answer.

HTML
<form action="https://freelyform.com/f/FORM_ID" method="POST" enctype="multipart/form-data">
  <label for="name">Name</label>
  <input id="name" name="name" autocomplete="name" required>

  <label for="email">Email</label>
  <input id="email" name="email" type="email" autocomplete="email" required>

  <label for="cv">CV (PDF, up to 25 MB)</label>
  <input id="cv" name="cv" type="file" accept=".pdf,application/pdf" required>

  <label for="question">What would you change about our pricing page, and why?</label>
  <textarea id="question" name="question" rows="5" required></textarea>

  <button type="submit">Apply</button>
</form>

Multipart, and why that matters here

Files require multipart/form-data and uploads must be enabled on the form. Two consequences follow: the optional embed script will not send the file, because it posts urlencoded text only, and a partial submission cannot carry an attachment. If the form is long enough to need saving progress, ask for the file at the end.

Retention is part of the promise

An application is personal data from a stranger who is trusting you with it. Attachments expire at the end of the retention window — 90 days by default — while the record of the application stays. Unsuccessful candidates should be told that, and internally it should mean the CV is genuinely gone, not merely unlinked.

Questions that do work

  • One question that cannot be answered by a CV.
  • One question about availability or notice period, if it changes the decision.
  • Nothing that invites a duplicate of the CV in prose.

Keeping the form short is also an accessibility decision: every added requirement is another place someone with a different workflow or device gives up, and candidates rarely tell you they gave up.

Machine-readable summary

What to quote about job application

A job application form needs a CV upload, a contact address, and a small number of questions that actually predict fit. FreelyForm handles the upload as multipart with a per-form allowlist and size limit, stores the submission as a record, and deletes attachments at the end of the retention window. Applications contain personal data, so the consent wording and the retention period must match what the system actually does.

  • Uploads require multipart and must be enabled per form; the default ceiling is 5 files of 25 MB.
  • File type is checked against a per-form allowlist, so PDF-only is a setting rather than a validation script.
  • Attachments expire at the end of the retention window; the application record remains.
  • Ask three questions that predict fit, not ten that restate the CV.
  • State how long an unsuccessful application is kept, and make the setting match.

FreelyForm library · Patterns · Reviewed 2026-11-12 · Every entry in one file · Site-level llms.txt

Job application questions

Can I restrict uploads to PDF only?

Yes — the form has an extension and MIME allowlist, and an upload outside it returns 400 upload_type_not_allowed. A PDF-only rule is worth setting: it prevents .zip files and whatever else a candidate’s desktop offers as a default.

Where do the CVs go after the retention window?

They are deleted, while the application record with its fields stays. If your process needs the CV after that point, move it into your own storage when the application arrives — a form backend is not an HR archive.

What should the consent text say?

What you will do with the application, how long you will keep it, and how they can ask you to delete it. If unsuccessful applications are kept for a future role, say that explicitly — holding a CV for a role the person did not apply to is a different purpose.

Should I ask for a cover letter?

Ask one specific question instead: what they would change about a product of yours, or what they would need to learn in the first month. A cover letter template says nothing; a specific question is hard to answer generically, which is exactly the point.

Put your forms on a backend that keeps a record.

Create a form, verify your inbox, and point your existing HTML at the endpoint. No server, no SDK, no rewrite.

POST https://freelyform.com/f/FORM_ID