1 · Scope
About this policy
This Privacy Policy explains how the Chrome extension Once — Form Autofill (“Once” or the “extension”) processes information. Once helps you maintain a reusable job-application profile, fill application forms, attach selected files, create a cover-letter PDF locally, and optionally import selected information from your open LinkedIn profile.
This policy distinguishes information processed locally by the extension from information transmitted to a website at your direction. Local processing is not the same as the developer collecting the information.
chrome.storage.local, not Chrome Sync.2 · Information processed
Information Once can process
Once processes only the information needed to provide features you choose to use. Depending on what you enter, upload, import, or ask Once to fill, this may include:
| Profile and contact details | First and last name, preferred name, email address, phone number and phone country, city, region, country, postal code, street address, full location, age, and date of birth. |
|---|---|
| Professional and application details | Professional headline and summary, LinkedIn/GitHub/portfolio URLs, B2B compensation expectations in USD, notice period, referral source, English level, work-authorization answer, and visa-sponsorship answer. |
| Files and user-created content | Your CV or resume, profile photo, cover-letter text and PDF, cover-letter company/role/recipient/date fields, and JSON you choose to paste or upload through the AI-assisted import screen. |
| Preferences and local state | Your choices about attaching a CV or photo and including age or birth date, whether the AI-import attention indicator has been dismissed, temporary editor drafts, file metadata such as name/type/size, and temporary LinkedIn import drafts. |
| Current webpage information | The current tab’s URL; the structure, labels, attributes, options, and existing values of visible form controls; nearby text needed to identify fields; open shadow roots; same-origin frames; and URLs of embedded cross-origin frames so Once can offer to open the form separately. This access occurs when you invoke Once for that page. |
| LinkedIn import information | On an open LinkedIn profile, Once can read the displayed name, headline, location, About text, profile URL, supported profile-photo URL, and visible Contact info details such as email, phone, complete birth date, and one website. The extension may open and close LinkedIn’s read-only Contact info, profile-photo/Frames preview, and About expansion to retrieve that information for your review. |
| Clipboard and local uploads | When you click the relevant control, Once can write a selected saved value or an AI prompt to the clipboard, read JSON text from the clipboard for review, and read files you select through file pickers. It does not continuously monitor the clipboard. |
Once does not request Chrome browsing-history access and does not build a browsing history. It handles the active tab URL and page content only as needed for the user-invoked autofill or LinkedIn-import operation. Except for a LinkedIn profile URL saved as part of your profile, current-page URLs are not retained as a history.
3 · Use
Why this information is processed
- To save, display, validate, edit, and export the job-application profile and files you choose to provide.
- To identify matching fields and fill or attach your selected information on the current page.
- To preserve existing page values unless you choose to replace them, and to show a local report of what was filled or needs review.
- To generate and preview a cover-letter PDF entirely within the extension.
- To prepare a LinkedIn import draft, let you review each item, and save only the selected items.
- To support the user-directed clipboard and JSON-file workflow for bringing information back from an AI assistant of your choice. Once itself does not call an AI service or send an AI provider your saved profile.
Once does not use this information for advertising, analytics, profiling for unrelated purposes, credit decisions, or sale of data.
4 · Storage and retention
Where information is stored
Persistent local extension storage
Saved profile fields, settings, incomplete editor drafts, CV/resume data, profile photo data, cover-letter text and PDF, and related file metadata are stored in chrome.storage.local in your Chrome browser profile. Once does not use chrome.storage.sync, localStorage, IndexedDB, or a developer database for this information. The data is therefore not intentionally synchronized through your Google account by Once.
Temporary session storage
LinkedIn import drafts are stored in chrome.storage.session. They are removed when you save or discard the import, when you use the full-profile deletion control, or when an expired draft is encountered. Import code treats drafts as expired after one hour and removes older expired drafts during a later import. Chrome also controls the lifecycle of session storage.
Retention
Persistent information remains in local extension storage until you edit, replace, or delete it; clear the extension’s browser data; or remove the extension and Chrome removes its stored data. Once does not retain a server-side copy. A website may separately retain information after you fill a field or attach a file; that website’s privacy policy and retention practices apply.
5 · Device boundaries
When information leaves your device
Once does not transmit your saved profile or files to the developer. Information can nevertheless leave your device in the following user-directed or feature-specific situations:
- Application websites: when you click “Fill this page,” selected profile values are inserted into the current website’s form. If you enable a CV, profile photo, or cover-letter attachment, the file is assigned to a matching file input. A website may upload an attached file immediately, even before you submit the application. The destination website then controls that information.
- LinkedIn: importing reads content already displayed in your open LinkedIn page. The review page may load the selected profile-photo URL from
media.licdn.com. If you choose to save that photo and approve Chrome’s optional host permission, Once downloads it from that exact LinkedIn image host using a request configured to omit credentials and referrer information and to reject redirects. LinkedIn will necessarily receive network information such as your IP address when serving the image. - Your chosen AI service: Once can copy a schema-only prompt that does not include your saved personal data. If you manually paste that prompt or any personal information into an AI service, that is an action outside Once and the AI service’s privacy terms apply. Once reads the returned JSON only when you paste it or select a local JSON file; it does not connect to the AI account.
- Links you open: if you open LinkedIn or an embedded application form from a link shown by Once, the destination website receives an ordinary browser request.
Review before sharing. Autofill changes the webpage immediately, and attaching a file can trigger immediate upload behavior implemented by the website. Once does not click the final application Submit button.
6 · Permissions
Chrome permissions and webpage access
activeTab |
Provides temporary access to the current webpage after you invoke Once. There are no required persistent host permissions for ordinary autofill. |
|---|---|
scripting |
Runs the form matcher/filler or the on-demand LinkedIn importer in an isolated extension context on the active tab. |
storage |
Stores the profile, preferences, files, editor state, and temporary imports locally. Access levels are restricted to trusted extension contexts. |
Optional https://media.licdn.com/* |
Requested only when you choose to save an imported LinkedIn profile photo. It can be declined or revoked in Chrome’s extension settings; text details can still be saved without the photo. |
For form filling, Once examines form controls and surrounding labels/content, reads existing values to avoid overwriting them by default, and can interact with open shadow roots and same-origin frames. It does not gain broad access to cross-origin embedded forms; it may instead show you a link to open such a form in its own tab.
7 · Third parties
No sale, advertising, or developer sharing
The developer does not receive, sell, rent, or share your locally stored information with data brokers, advertisers, analytics providers, or other third parties. Once includes no analytics, advertising, tracking pixels, remote error reporting, authentication service, developer API, or remote AI integration.
Once bundles its runtime PDF libraries and fonts with the extension. Local extension pages load their code from the installed extension rather than a remote script provider.
Third-party websites receive information only through the user-directed interactions described above. Their own privacy policies apply after they receive information.
8 · Your choices
Edit, limit, or delete information
- You can edit saved profile fields and replace or remove saved files from Once’s profile and cover-letter screens. Profile changes are saved automatically.
- Before each autofill operation, the popup lets you choose whether to include the CV, profile photo, cover letter, and age/birth date, when those items are available.
- You can decline or revoke the optional LinkedIn image-host permission.
- The Delete saved profile control in the profile editor removes the saved profile, settings, editor draft, CV, photo, cover-letter text/PDF, file metadata, and pending LinkedIn import drafts from the extension’s storage. It does not delete your original local files or information already received by another website.
- You can remove only the saved cover letter from the cover-letter screen without deleting the rest of the profile.
- You can also remove the extension or clear its stored browser data using Chrome. Chrome controls deletion performed through browser settings or extension removal.
9 · Security
Local-first safeguards and limitations
Once reduces exposure by avoiding developer servers, using local extension storage, restricting storage access to trusted extension contexts, using user-invoked active-tab access rather than persistent access to all sites, validating imported content and file types/sizes, restricting the optional photo download to supported HTTPS paths on LinkedIn’s image host, and bundling executable code with the extension.
Once does not add application-level encryption to saved data. Security also depends on Chrome, your operating system, device access controls, and the security of websites where you choose to share information. No method of storage or transmission is guaranteed to be completely secure.
10 · Children
Children’s privacy
Once is a job-application utility and is not directed to children under 13. The extension has no developer account system or server that would allow the developer to identify users or knowingly collect children’s information. A parent or guardian who believes a child has stored information in Once can remove it using the deletion options described above and may contact the developer using the address below.
11 · Chrome Web Store
Limited Use compliance
The use of information received from Chrome APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.
Chrome API information is used only to provide and improve the user-facing functionality described in this policy. It is not used for personalized advertising, transferred for unrelated purposes, sold, or used to determine creditworthiness or for lending purposes.
12 · Changes
Changes to this policy
This policy may be updated if Once’s features, permissions, data practices, or applicable requirements change. The “Last updated” date at the top will be revised when the policy changes. Material changes should be reflected in this public page and, when appropriate, in the extension’s listing or release information. Continued use after an update is subject to the updated policy.
13 · Contact
Questions about privacy
For questions or requests concerning this Privacy Policy or Once’s privacy practices, contact the developer at: