Trust

Chrome extension permissions

TryApplyNow Autofill is an optional Chrome extension that helps you save jobs, score how well a role fits, and autofill applications on supported job sites such as Greenhouse, Lever, and Workday. This page explains what it does and why it asks for each permission, in plain language.

What it does

Reads the content of application pages you visit so it can detect supported application forms and job details.
Saves jobs to your TryApplyNow account and scores how well they fit your profile.
Fills in application forms using the profile information you have saved.

It is optional. The website works without it.

Permissions it requests

storage

Saves your settings and your signed-in session locally in the browser.

activeTab and tabs

Lets the extension see the tab you are on so autofill runs on the page you are actually applying from.

scripting

Injects the autofill logic into the application page so it can fill fields.

identity

Signs you in to your TryApplyNow account with Google, using Chrome's built-in OAuth flow.

debugger

Used only for Workday autofill. See the detailed explanation below.

host access to all sites (<all_urls>)

The extension is currently configured to run on all sites. See the honest note below.

The debugger permission, explained honestly

The debugger permission looks alarming, so here is exactly what it is for.

Some Workday fields, such as date pickers and type-ahead inputs, reject input that did not come from a real keyboard or mouse. Events that an extension dispatches normally are marked as untrusted by the browser, and Workday refuses them. The only reliable way to fill those specific fields is to use Chrome's debugger interface (the DevTools Protocol), which can deliver keyboard and mouse input that the page accepts as trusted.

We use it specifically to send that input into the Workday form during an autofill. Honest details about how it is scoped:

While it is active, Chrome shows a banner that reads “TryApplyNow Autofill started debugging this browser tab,” with a Cancel button. That banner comes from Chrome, not from us.
It attaches only at the start of a fill session and detaches when the fill finishes, or automatically after 60 seconds, whichever comes first.
If you click Cancel, it detaches immediately.

Honest note on the all-sites permission

Today the extension requests access to all sites (<all_urls> in its manifest), and its content scripts can load on any page you visit. This is what Chrome will show you at install time. We have not narrowed this permission to a fixed list of job sites, and we are reviewing whether it can be scoped more tightly. We are telling you the current state plainly rather than implying it is already restricted.

Questions or concerns

Email support@tryapplynow.com with questions about the extension, or security@tryapplynow.com to report a security concern. See also our Security and Privacy Policy pages.