Privacy

Last updated 25 September 2026

Foothold is a Chrome extension you install yourself, plus this website. There is no Foothold account and no Foothold server that stores what you type.

On your computer

The extension saves settings in Chrome’s local storage on that browser profile. That includes your OpenAI API key, the role or freelance details you enter, a short resume summary, and a list of posts it has already seen. The API key is stored as plain text. Anything with access to that Chrome profile can read it.

A Gmail connection uses Chrome’s sign-in and the Gmail compose scope. The token stays with Chrome. Foothold uses it only to create drafts.

What leaves the browser

• OpenAI, at api.openai.com, using the key you paste. Prompts can include hiring-post text, your target role or freelance notes, the resume summary, and, for a PDF resume, the file itself so it can be summarised. If a post has no email in the text, a downscaled image of that post may be sent so an address can be read from it.
• Google, at gmail.googleapis.com, when you connect Gmail. The extension creates a draft in your account. It does not send mail.
• LinkedIn, only as the site you already have open. The extension reads posts in that tab. It does not receive your LinkedIn password and does not send it anywhere.

A CSV report downloads to your machine. It is not uploaded.

This website

The site is static files on GitHub Pages. It does not set cookies and does not run analytics. GitHub may keep ordinary server logs of visits. Their policy is at GitHub’s privacy statement.

How long it stays

Local extension data stays until you change it, clear it in the extension, or remove the extension and its data. OpenAI and Google keep whatever their own policies say about API requests and drafts.

Children

Foothold is not meant for anyone under 16.

Changes

If this policy changes, the new version will be on this page with a new date.

Contact

Questions go to the Foothold repository on GitHub.