Privacy policy

What Breadchaser is

Breadchaser is a Chrome side-panel extension for job seekers. It reads the job posting or LinkedIn profile you have open and helps you judge fit, fill applications, tailor a resume, draft outreach, and track applications. This policy explains what data the extension handles, where it goes, and what stays on your computer.

Data that stays on your device

Almost everything lives in your browser's extension storage and never leaves it unless a section below says otherwise:

• Your profile (skills summary, basic info, work history, education, preferences such as salary floor and home address).
• Fit results, Fit history, saved resumes, drafted answers and cover letters.
• Your application pipeline and networking board (unless you sign in and enable cloud sync — see below).
• Your own OpenRouter key, if you bring one. It is stored locally, used only to sign your own requests, and is never exported, backed up, or synced.

Data sent to Breadchaser's server for an AI request

When you run an AI action (Fit, a draft, a resume, outreach, interview prep, profile tips), the extension sends the text that action needs — the job posting or profile page text you are looking at, and the parts of your profile the prompt uses — to the Breadchaser Worker (a Cloudflare Worker). The Worker forwards it to an AI model host through OpenRouter and returns the reply.

The Worker does not store the prompt or the reply. It logs metadata only: which model answered, token counts, timings, and error codes. OpenRouter and the model host process the text to produce the reply; we route to hosts with no-training data policies where OpenRouter offers them.

Account and plan

Signing in uses Firebase Authentication (Google sign-in or an email link). We receive your email address and a user id. Your email is used to look up your subscription with LemonSqueezy, our payment provider; card details are handled entirely by LemonSqueezy and never reach us.

Usage metering (the weekly crumb budget) is stored on the Worker against your user id: how many crumbs you spent this week and which features you used. Old rows are deleted automatically after 8 weeks.

Cloud sync (signed-in only)

If you sign in, your application pipeline, networking board and momentum days are synced to the Worker so they match across devices. They are stored as-is against your user id and are not read by us for any other purpose. Signed-out devices never send or receive them.

Community signals

When you flag a posting (ghost, scam, stale) or open a posting on a supported board, the extension sends a hash of the posting's id and a salted hash of your account — never the URL, the posting text, or your user id. This powers the 'flagged by N' and 'seen by N · reposted' signals other users see.

Other services, only when you use the feature

Each of these happens only when you take the action named:

• Commute distance: your home address and the job location are sent once to OpenStreetMap's Nominatim geocoder; the result is cached on your device.
• GitHub import: your GitHub username is sent to api.github.com to read your public profile and repositories.
• 'Site isn't supported' reports: the page URL (including query parameters, so we can reproduce the read), page title, your note, and read diagnostics are stored on the Worker for 90 days.
• Newsletter signup (if shown): your email is sent to Brevo, our mailing-list provider.

What we never do

• We do not sell data, share it with advertisers, or use it to build profiles for any purpose other than the features described here.
• We do not read your browsing outside the page the side panel is working with, and the page reader runs only when the panel asks it to.
• Autofill types into fields you are looking at and never submits a form for you.

Deleting your data

Settings → Privacy has two buttons. 'Delete my cloud data' erases everything the Worker holds for your account (synced boards, usage rows, plan cache). 'Clear all local data' wipes the extension's storage on this device and signs you out. Uninstalling the extension also removes all local data.

Changes and contact

This policy is versioned (see the date at the top). Material changes will be listed in the extension's release notes. Questions: nick@breadchaser.ai.