Matchstick privacy policy
Matchstick is a Chrome extension that scores how well your resume matches a job posting and helps you write a cover letter. It has no servers and no accounts. Everything it stores stays in your browser, on your device.
What Matchstick stores, and where
All of this is kept in Chrome's local extension storage on your device. ProductGurus never receives it.
| Data | Why |
|---|---|
| Your resume text, plus up to 5 tailored versions | To score matches and write letters |
| Name, email, phone and city you enter | To print the header on your cover letter PDF |
| Your AI provider API key and chosen model | To call the AI model you picked |
| Jobs you score, their requirements and scores | So re-scores are consistent and list badges show your scores |
| Applications you mark as applied, with status, letter and resume version | For your application log |
| Your answers to "Was this score right?" | So you can export them; they are never sent anywhere |
You can export all of it (except your API key) from the Applications screen, and delete all of it from Settings → Clear all local data. Uninstalling the extension also deletes it.
What leaves your device
Only one thing. When you use an AI feature (scoring, a letter, answers, resume edits, ranking a results page, or the claim check), Matchstick sends the needed text directly from your browser to the AI provider you chose. Today that is Google's Gemini API, called with your own API key.
That request contains the job posting text and your resume text. Before sending, Matchstick removes the email addresses, phone numbers, street addresses and profile links from your resume. Your name and city may be included so a letter can be signed.
Google handles that data under its own terms. On Google's free (unpaid) tier, Google says it may use what you send to improve its products and that people may review it; on a paid key it does not. In the EEA, Switzerland and the UK, Google applies its paid-tier protections to the free tier as well. Read Google's Gemini API terms before choosing a key.
Pages Matchstick reads
On supported job sites (LinkedIn, Indeed, Greenhouse, Lever, Workday, Ashby, Workable and SmartRecruiters), Matchstick reads the job posting on the page you are viewing so it can score it, and reads job cards on search results to show match badges. It does not read other sites unless you click "Let Matchstick read this page" or paste a job link, and Chrome asks for your permission first. Matchstick does not record your browsing history.
What Matchstick never does
- No analytics, tracking pixels or third-party scripts. Fonts and libraries are bundled with the extension.
- No selling or sharing of your data, and no advertising.
- No use of your data for credit, lending or any purpose other than helping you apply for jobs.
- No access by ProductGurus, because your data never reaches us.
The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.
Children
Matchstick is meant for job seekers and is not directed at children under 13.
Changes
If this policy changes, the new version will be posted at this address with a new effective date, and the extension's store listing will link to it.
Contact
Questions: productgurus@proton.me