Privacy
Your information stays on this computer. This page lists what is stored, and the few cases where something leaves it, so you can check.
Where your data lives
/var/lib/blanket/data
That folder is outside the code folder, is never uploaded, and is not part of the project's git history. It holds your resumes' text and analysis (and the original file only if you tick "keep a copy"), jobs, saved answers, application history, settings, and the encrypted vault.
What leaves your computer
| When | Goes to | What is sent |
|---|---|---|
| You search for jobs | HiringCafe and Indeed; LinkedIn, ZipRecruiter and Monster through your own browser | Search titles and a place. Not your resume. |
| You search for a place or address | OpenStreetMap (Nominatim); the US Census geocoder for street addresses | The text you searched for. Suggestions while you type come from an offline list on this computer. |
| You apply | The employer's application system (for example Workday) | What the form asks for and the resume file you choose. That is the application itself. |
| You link Gmail | Google (Gmail API) | Read-only access, used to find verification and confirmation emails from job sites. While an application you started is open, Blanket reads that application's verification code and confirmation email automatically (see the Terms of use, section 3). The code is typed into the page and not saved. Blanket does not send, change or delete mail. |
| You use an AI action | OpenAI | Only after you click it, and only what the preview showed you, with storage switched off on the request. Off unless you add an OpenAI key. |
Blanket itself loads nothing from outside your computer: no analytics, no fonts, no scripts from the web. The dashboard answers only requests from this computer.
The extension
The Blanket browser extension keeps no resume data. It talks to the dashboard on this computer and reads job pages in tabs where you are signed in.
When you start an application from the dashboard, the extension opens one tab for it and runs its page steps there as user scripts (no browser debugger), to type, click and upload your resume in that tab only. In fill-only mode it stops at the review page and watches for your own Submit click. It lets go when the run ends or the tab closes, and does not act in any other tab.
The vault
Sign-ins for job-site accounts are encrypted (AES-256-GCM, key derived from your account password). The password is typed into a dialog, is never stored, logged or put in a page address, and cannot be recovered by Blanket. Keys and secrets are scrubbed from logs and error messages.
Sensitive answers
Work-authorization, legal and demographic answers are kept only on this computer, are never guessed, and are left out of exports unless you choose to include them.
Your controls
- Settings: create a backup, export your data, see where it lives.
- My information: edit or delete any saved answer.
- Profile: rename, archive or restore a resume.
- Job sources: switch a source off, or forget a sign-in.
- To remove everything, close Blanket and delete the data folder above.
Last updated 22 October 2026.