ApplyOnce ← Back

Privacy policy

Effective July 10, 2026 · Updated July 24, 2026 · Applies to the ApplyOnce browser extension

The short version: everything ApplyOnce knows about you — your profile, documents, answers, and history — lives in your browser on your device and is never transmitted. The extension sends only anonymous usage statistics (which features run and whether they succeed), and you can turn even that off in Settings. There are no accounts.

What ApplyOnce stores, and where

All of the following is stored locally in your browser's extension storage (IndexedDB) on your device, and nowhere else:

Your profile — name, contact details, links, work history, education, skills, and the explicit answers you set (work authorization, salary, optional EEO self-identification).
Your documents — the resume/cover-letter files you add, kept so they can be attached to application forms.
Saved answers — responses you chose to save for reuse.
Application history — job page titles, links, statuses, reminders, fill statistics, and an optional snapshot of the posting's description text. Never the values that were filled.
A diagnostics log — the structure of your last 50 fills (field types, outcomes, confidence). Never field values, never profile data.

You can optionally encrypt the profile, documents, and saved answers with a passphrase (AES-GCM). Without one, data is stored in plain IndexedDB and protected by your operating-system user account — that's the honest description of both modes.

What is transmitted

Anonymous usage statistics only — and you can turn them off. The extension reports feature-usage events to Google Analytics under a random identifier so we can see what's working: things like "a fill completed on a Greenhouse form: 24 fields, 20 filled, 3 held for review, took 4 seconds" or "resume import failed: PDF". Every event is checked against a strict allowlist before it leaves your device. The following are never sent, on any event:

Form values, or anything you filled or typed
Your profile, resume/document contents, or saved answers
Page addresses, hostnames, page titles, company names, or question text (the only site-shaped signal is the job platform's name, e.g. "greenhouse" or "lever")

Events carry your browser language and timezone (rough region — never precise location; the extension sends no IP-based geolocation data). Opt out any time in the side panel under Settings → Privacy; the switch takes effect immediately. There is still no backend, no crash reporter, and no account system.

This website (applyonce pages you're reading now) uses standard Google Analytics page measurement, separate from the extension.

Why it asks to read websites

ApplyOnce needs access to the pages you visit so it can detect job application forms and fill them. That detection runs entirely on your device: a scoring check decides whether a page looks like a job application, and ordinary pages (articles, shops, logins, banking) are ignored without deep scanning. Page content is never sent anywhere — there is nowhere to send it.

What ApplyOnce never does

Never submits an application — you always press submit yourself.
Never fills a value it can't trace to your profile or saved answers.
Never sells, shares, or transmits your data (there's no data to sell — it isn't in our possession).
Never fills EEO or legal questions except from answers you explicitly set.

Bug reports

If you choose to report a bug, the extension copies a structure-only diagnostics log to your clipboard and opens a GitHub issue form. You see exactly what's in it, and you decide whether to paste it. Nothing is submitted automatically.

Deleting your data

Everything can be deleted in the side panel (documents, saved answers, history, diagnostics log), and removing the extension deletes all of it at once. Because nothing exists outside your device, there is nothing else to request deletion of.

Chrome Web Store disclosures

ApplyOnce's use of information complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. Data handled by the extension is used solely to provide its single purpose: filling job application forms with your locally stored profile.

Changes and contact

If this policy ever changes in a way that affects how data is handled, the extension will disclose the change prominently before it applies. Questions: open an issue on GitHub.