Privacy Policy — shortlistOS Web Clipper
Last updated: September 24, 2026

shortlistOS Web Clipper lets you save job postings to your shortlistOS account.

Information handled
The extension handles your shortlistOS email address, user ID, authentication tokens, available shortlists, and Powerpack access status. Authentication tokens and account connection information are stored locally in your browser, along with your last selected shortlist and cached account information.

When you open the extension, it reads the current tab’s title and URL to identify the page. When you click “Save opportunity,” it sends that page’s URL, title, HTML content, structured data, language, and capture timestamp to shortlistOS. It also sends the selected shortlist identifier, extension version, and browser family.
Captured content may include personal information present on the page. Only save pages you intend to share with shortlistOS.

How information is used
Information is used to connect your account, verify Powerpack access, display your shortlists, and extract job details from pages you choose to save. The extension does not continuously monitor your browsing or collect your full browsing history.

Storage and transmission
Communication with shortlistOS uses HTTPS. Captured page content is not saved in the extension’s local storage. Disconnecting your account clears the extension’s locally stored account data and preferences. It does not delete opportunities already saved to shortlistOS.

shortlistOS is hosted by Hetzner in Germany. Saved page content is sent to Mistral AI to extract job information. Raw Web Clipper input is normally retained for minutes and deleted after successful processing or the third failed attempt. Extracted information remains until you delete the relevant content or your account. Deleted data may remain in backups until those backups expire.
Mistral’s retention and model-improvement practices depend on the applicable plan, settings, and terms. Deleting raw content from shortlistOS does not necessarily delete Mistral’s copy at the same time.
OpenWebNinja receives only job titles and company names for salary and company information. Cloudflare processes network and request information to provide delivery and security services.
Web-server logs include IP addresses, requested URLs, user-agent information, and API requests, and are retained for 15 days. Error logs are retained until the next application release.
You can delete opportunities or your account within shortlistOS.

Data use commitments
We do not sell user data. We use and share extension data only to provide its stated functionality or as permitted by applicable law and platform policies. We do not use it for advertising, creditworthiness assessments, or lending decisions.
Contact

For privacy questions or deletion requests, contact privacy@shortlistos.co