Chrome Extension Privacy Policy

The Resumly Chrome Extension is designed with one rule: nothing leaves your browser unless you click “Import to Resumly”.

What the extension reads

When \u2014 and only when \u2014 you click the Resumly icon in the Chrome toolbar, the extension runs a one-time script in the active tab that reads:

• The page URL and title
• Any application/ld+json structured data on the page (e.g. JobPosting schemas)
• A small set of OpenGraph / Twitter meta tags (title, description, site name)
• The visible text content of the page, with nav/footer/sidebars removed, truncated to ~15 KB

This happens locally in your browser. Nothing is sent to any server at this stage.

What the extension does with that data

The popup shows you a preview card with the extracted title, company, and location. The full payload is held in memory in the popup process only.

When you click Import to Resumly, the extension:

1. Base64-encodes the payload into a URL fragment
2. Opens a new tab at https://resumly.app/import#data=\u2026

The payload is placed in the URL hash, which by design is never transmitted to any server \u2014 not even resumly.app’s. The hash is readable only by the JavaScript running on the /import page in your browser. That script decodes it, sends it to Resumly’s job parser API under your session, saves the parsed job to your account, and redirects you to the funnel.

What the extension does NOT do

• No background pages, no service workers that run when the popup is closed
• No automatic page scraping \u2014 the extension never reads a page without you clicking the icon
• No analytics, no telemetry, no error tracking inside the extension
• No third-party scripts, trackers, or advertising SDKs
• No host permissions \u2014 only activeTab and scripting, both scoped to the tab you’re on when you click the icon
• No cookies, no passwords, no form data, no browsing history
• No persistent storage \u2014 the extension does not use chrome.storage

Permissions used

• activeTab: Read the URL and content of the tab you’re on, for the duration of a click. Revokes automatically when you switch tabs.
• scripting: Inject the content script into the active tab to extract the job data.

Data handled by resumly.app

Once the data reaches resumly.app, it is subject to the main Resumly Privacy Policy. The imported job becomes a row in your account’s jobs table, linked to the resume and application you create from it.

Contact

Questions? Email yj.digitall@gmail.com.