ApplyOnce Privacy Policy

Last updated: March 3, 2026

The short version: ApplyOnce does not collect, transmit, or store any of your personal data on any server. Everything stays encrypted on your device. We cannot see your data even if we wanted to.

What Data ApplyOnce Stores

ApplyOnce stores your application profile (name, contact info, education, work history, etc.) locally on your device only, using Chrome's built-in storage API. This data is:

Encrypted with AES-256-GCM using a passphrase you set
Key derived via PBKDF2 with 600,000 iterations
Protected with a unique salt per installation and random IV per encryption
Accessible only by you, on your device, with your passphrase

What Data ApplyOnce Sends

None. ApplyOnce makes zero network requests. No data is ever sent to any server, API, analytics service, or third party. There is no server to send it to.

What Permissions ApplyOnce Uses

storage — To save your encrypted profile locally on your device
activeTab — To access the current tab's form fields when you click "Fill This Form"
scripting — To inject the form-filling script into the current page

That's it. No host permissions. No background network access. No "read all your browsing data."

Analytics & Tracking

ApplyOnce does not use any analytics, tracking pixels, cookies, or telemetry. We do not know who you are, what sites you visit, or how you use the extension.

Third-Party Services

ApplyOnce does not integrate with or send data to any third-party service. Payment processing (for Pro subscriptions) is handled by Stripe on their website — ApplyOnce never sees or stores payment information.

Data Deletion

Uninstalling the extension deletes all stored data. You can also use the "Panic — Clear All" button to immediately erase your encrypted profile.

Children's Privacy

ApplyOnce does not knowingly collect information from children under 13. The extension is designed for high school seniors (age 17+) and adult job seekers.

Changes to This Policy

If we ever change this policy, we will update this page and the "last updated" date. The core commitment — your data stays on your device, encrypted, never transmitted — will never change.

Contact

Questions? Email applyonceapp@gmail.com