Privacy Policy · Last updated 30 October 2026

Privacy Policy

This policy covers two separate things: this website, and the Applicant Packager Windows app. "I" means Ramy Elbeitam, who publishes Applicant Packager from the Philippines. You can reach me about privacy at [email protected].

The short version: the app runs on your computer, and I do not receive your email, your CVs or your search terms. This website uses Google Analytics and counts installer downloads, and, if ads are approved and enabled, the home page and guide pages may show Google ads.

Part A: this website

Analytics

This website uses Google Analytics 4 to measure page views, referring sites and clicks on the installer download. Google receives the page you visit, an approximate location derived from your IP address, and information about your browser and device, and stores a first-party cookie to tell repeat visits apart. I see aggregate figures only, to learn which pages and guides are useful. I do not use them to identify or contact individual visitors. The about, contact and legal pages carry no analytics.

In the European Economic Area, the United Kingdom and Switzerland, analytics storage stays off until you consent through Google's consent message. You can also block analytics with your browser settings or an analytics blocker. Read Google's privacy policy for how Google handles this data.

Download counts

Installer downloads are counted by a Cloudflare service that records the time, the file name, the country, the referring page or site and the browser user-agent. It does not store IP addresses. Bots and resumed downloads are not counted. I use the counts only to see how many people download the app and where they hear about it.

Hosting

The site is hosted on Cloudflare, which processes technical data such as IP addresses and request details to deliver and protect it. See Cloudflare's privacy policy.

Google ads (when enabled)

AdSense is not approved yet, so this site does not currently show ads. If ads are approved and enabled, the home page and guide pages may show ads served by Google AdSense, which would help keep Applicant Packager free. If ads are shown, Google and its partners, as third-party vendors, may use cookies and similar technologies to serve ads based on your visits to this and other websites, to limit how often you see an ad, and to measure ad performance. I do not receive or control the information Google collects this way. Ads would appear only on the home page and guide pages; the about, contact and other legal pages do not carry ads.

You can turn off personalized ads from Google in Google Ads Settings, and opt out of personalized advertising from many third-party vendors at aboutads.info or, in Europe, youronlinechoices.eu. Visitors in the European Economic Area, the United Kingdom and Switzerland are asked for consent through Google's consent message before cookies are used for ads where the law requires it, and can change that choice later. Blocking cookies in your browser also limits ad personalization. See how Google uses information from sites that use its services and how Google uses cookies in advertising.

Cookies

This site uses a Google Analytics cookie to measure page views. If ads are approved and shown, Google AdSense and its partners may also set advertising cookies; no AdSense cookie is set while ads are disabled. I do not use cookies for anything else. You can delete or block cookies in your browser, and the site keeps working without them.

Email and donations

Email links on this site open your email app; nothing is sent until you choose to send it. If you write to me, I receive your address, name, message and anything else you include, and I use it to answer you and provide support. Messages are not added to a marketing list. Email is handled through Gmail and your own email provider, which may process it internationally.

Please do not send CVs, applicant records, mailbox passwords or payment details by email.

If you volunteer to test a pre-release version, I keep your email address only to send you the test build and ask for feedback, and I delete it on request or when testing ends.

The donate button opens PayPal; this website collects no payment details. PayPal processes the payment under its own terms and privacy policy and shares with me what it shares with any recipient, such as your name, email address, amount and note. I use that only to keep records of donations, answer you and meet legal duties. It is not used for marketing. Nothing is sold on this website: a donation is a voluntary gift, not a purchase.

How long I keep things

Correspondence is kept for 5 years from creation. Donation and related compliance records are kept for 10 years. Backups follow the same schedule as the records they copy. I manage these periods manually and delete records when the period ends, unless a legal hold or another legal requirement applies. These periods follow professional advice rather than independent verification. Hosting providers keep their own logs under their own policies.

Your choices

Write to me to ask for access to, correction of, or deletion of information I hold about you, or to exercise another right available under your local law. I may need to verify your identity first, and only proportionately. You may also complain to the Philippine National Privacy Commission or another competent authority. Requests about applicant records should go to the recruiter that holds them, not to me.

Part B: the Windows app

Your email stays between you and your mail provider

The app connects from your computer directly to the mail server you configure, over SSL/TLS. There is no Applicant Packager server in the middle, no sign-up and no Applicant Packager account. Emails, CVs and search terms are processed on your computer and are not sent to me.

Read-only access

The app opens your mailbox read-only. It can read messages and download the attachments you select, but it cannot send, delete, move or mark messages as read, and it does not change flags or expunge messages.

No tracking

The app has no telemetry, no crash reports, no usage analytics, no online activation and no update check. It does not tell me that you installed it, what you searched for, or which CVs you saved. The desktop app shows no ads.

Signing in with Microsoft (version 1.1, in testing)

Version 1.1, now in testing, adds Sign in with Microsoft for mailboxes where app passwords no longer work. When you use it, your browser talks to Microsoft directly and the reply returns to a local port on your computer; there is still no Applicant Packager server. The app keeps the refresh token encrypted with Windows DPAPI for your Windows user and holds access tokens in memory only. No token is written to a log or crash report, and you can revoke access from your Microsoft account page or with Disconnect in the app.

What is stored on your computer

The app keeps its data under %APPDATA%\Applicant Packager: scan history (names, senders, subjects, dates, attachment names, scores and match reasons), account profiles, settings and presets. Account profiles never contain passwords. Downloaded CVs go to the folder you choose. You can delete history and downloaded files from Data & retention; nothing is deleted without a preview and confirmation.

Mailbox passwords are kept in Windows Credential Manager when that store is available and working. If it is not, the password is held only in memory for the current session and you re-enter it next time; it is never written to an account file. The app does not encrypt scan history itself, so protect your Windows account and any backup or sync service that includes that folder.

Your responsibility for applicant data

If you use Applicant Packager, you decide why and how applicant data is processed, and you are responsible for handling it under the data protection law that applies to you. The app is a filing tool, not a compliance system. If you pass exported CVs to an AI assistant, that assistant's provider receives them under its own terms.

Contact and changes

Questions about this policy: [email protected], or Ramy Elbeitam, Parañaque City, Metro Manila, Philippines.

I may update this policy when the site or the app changes. The date at the top shows the last update. A more detailed notice about the app's data is in the product privacy notice, and donation handling is described on the donations and support page.