Legal

Privacy Policy

Last updated: August 18, 2026.

The short version: these apps were built specifically so there'd be nothing to put in a privacy policy. No accounts, no analytics, no trackers, no ad networks, no server that sees your data — because for most of these apps, there is no server. Everything below exists to make that claim checkable, app by app, rather than to ask your permission for things we don't do.

This policy covers boringbydesign.com (this website) and every app listed on it: Notes, Todos, Calendar, Share, Maps, and resumeBuddy.

This website

boringbydesign.com itself doesn't set cookies, run analytics, or load any third-party script. The only client-side code is scroll animations and a mobile menu toggle — both purely cosmetic, neither sends anything anywhere. Loading this page tells our hosting provider what any web request tells any host (your IP address, the page requested) — that's infrastructure-level logging outside our control, not something we collect or use ourselves.

Notes, Todos, Calendar

These three apps work the same way: everything you type — notes, tasks, events — is saved to your device's local browser storage as you go. Nothing is sent to a server, because none of these apps have one. Import and export are things you trigger yourself, to a file you choose; nothing leaves your device unless you explicitly export or share it. Uninstalling the app or clearing your browser's site data removes everything, permanently — there's no copy kept anywhere else to delete.

Share

Share moves text or files between two devices by encoding them into QR codes and reading them back with your camera. There is no network connection, no server, no pairing step, and no account — the camera is the only "connection" involved, and it's used purely to scan codes on your own screen. Nothing is retained after a transfer finishes.

Maps

Maps is offline-first with one deliberate exception: when you draw a box and choose to download a region, that request goes out to OpenStreetMap's public Overpass API to fetch the map data for that area — the only outbound network call any of these apps make on your behalf. Once downloaded, that data is stored locally and everything else — browsing, search, and turn-by-turn directions — runs entirely offline, with no further requests, live tracking, or location reporting to anyone.

resumeBuddy

resumeBuddy is a browser extension, not a website, so it works a little differently:

  • Your master resume, API keys, and settings are stored in your browser's local extension storage and never sync to any account of ours — there isn't one.
  • Capture is entirely user-triggered: selecting text on a job posting and choosing "Tailor with resumeBuddy" from the right-click menu. There's no persistent content script reading pages in the background, and no broad site access.
  • When you generate a tailored resume, cover letter, or outreach message, your resume text and the job posting are sent directly from your browser to whichever AI provider you've chosen and configured with your own API key — Gemini, Groq, OpenRouter, or Anthropic. That request goes straight to the provider; it never passes through a server of ours, because there isn't one.
  • Handling of that data once it reaches the provider is governed by that provider's own privacy policy and terms, not this one — it's worth reading whichever one applies to the provider you pick.
  • One honest caveat: browser local storage isn't encrypted at rest. The thing actually protecting your saved API keys is your device staying unlocked and uncompromised, not encryption.

Children's privacy

These apps aren't directed at children and don't knowingly collect information from anyone, of any age — there's no account system to collect it into in the first place.

Changes to this policy

If an app's data handling ever changes, this page will be updated to match before that change ships, and the "last updated" date above will move. There's no mailing list to sign up for — check back here if you want to know.

Contact

Questions about any of this? Reach out at contact@boringbydesign.com.