Privacy Policy

Last updated: March 23, 2026

The short version: JobStash is a local-first application. Your job application data is stored on your computer in a SQLite database. We do not collect, transmit, or store your personal data on any server.

1. What Data JobStash Collects

The JobStash Chrome extension and local server collect the following data, all stored exclusively on your local machine:

Job application details you choose to save (company name, job title, URL, salary, notes)
Application stage history (when you moved an application between stages)
Notes you add to individual applications

This data never leaves your computer. It is stored in a SQLite database file at ~/data/job-applications.db.

2. What Data We Do NOT Collect

We do not collect browsing history
We do not collect personally identifiable information
We do not track which job boards you visit
We do not transmit any data to external servers
We do not use cookies or tracking pixels in the extension
We do not sell or share any data (because we do not have any)

3. Chrome Extension Permissions

JobStash requests the following Chrome permissions:

activeTab: To detect which job board page you are viewing and offer to save the job listing
tabs: To update the extension badge icon when you navigate to a job posting
storage: To store extension settings locally in Chrome's storage
host_permissions (localhost): To communicate with the local Python server running on your machine at 127.0.0.1:8235
host_permissions (all_urls): To detect job board pages across different domains (LinkedIn, Greenhouse, Lever, etc.)

4. Local Server Communication

The Chrome extension communicates with a Python server running on your local machine (127.0.0.1:8235). This communication:

Never leaves your local network
Uses a local API key for authentication
Only transmits data between the extension and your local database

5. Website Analytics

The jobstash.co website (not the extension) uses Plausible Analytics, a privacy-friendly analytics service that:

Does not use cookies
Does not collect personal data
Is GDPR, CCPA, and PECR compliant
Does not track users across sites

The Chrome extension itself does not include any analytics.

6. Data Storage and Deletion

Since all data is stored locally on your machine:

You have full control over your data at all times
To delete all data, remove the database file at ~/data/job-applications.db
Uninstalling the extension removes all extension-related storage from Chrome
No account creation is required, so there is no account to delete

7. Third-Party Services

JobStash does not integrate with any third-party services. The extension communicates only with your local server. No data is sent to any external API, cloud service, or analytics platform.

8. Changes to This Policy

If we make changes to this privacy policy, we will update the "Last updated" date at the top of this page. Since JobStash is local-first by design, the core privacy commitment (your data stays on your machine) will not change.

9. Contact

If you have questions about this privacy policy, please open an issue on our GitHub repository.