FillDaForm Privacy Policy
FillDaForm (“we”, “our”, or “the extension”) is an intelligent, local-first form autofill Chrome extension designed from the ground up with a strict privacy-by-design architecture. We believe your personal identity data belongs exclusively to you.
Core Privacy Tenets
- Local-First Storage by Default: All profiles, canonical fields, saved answers, synonyms, and domain preferences are stored directly on your device within client-side
IndexedDB(filldaform_db) andchrome.storage.local. Users may optionally connect their Google account for encrypted Cloud Sync to back up profiles and prevent accidental data loss from Chrome cache purges or browser uninstalls. - Zero Outbound Ad Telemetry: FillDaForm does NOT communicate with external trackers, data brokers, advertising networks, or analytics platforms. No network requests are made with your answers or form data without your direct action.
- No Credential Access: Passwords (
type="password"), one-time passwords/2FA codes (autocomplete="one-time-code"), and payment card numbers (autocomplete="cc-number") are strictly filtered out by the DOM scanning engine and are never parsed or stored. - Never Auto-Submits: FillDaForm fills fields into the active document only after explicit user approval. It NEVER clicks submit buttons or submits forms automatically.
- Explicit Consent for Learning & Backups: Newly entered answers are never saved without your explicit instruction. Cloud Sync is 100% opt-in and can be disconnected anytime.
Information We Handle Locally
When you use FillDaForm, the extension processes the following data solely within your browser:
Profile & Answer Data
Values you choose to save (name, personal email, phone, work experience, LinkedIn URL) linked to your chosen profiles.
Form Context
Label text, input types, and attributes of interactive form fields discovered on the active tab during an active scan session.
Preferences
Active profile selection, domain exclusion list, and theme preferences.
Chrome Extension Permissions Justification
In strict compliance with the Google Chrome Web Store Developer Program Policies, FillDaForm requests only the minimum permissions necessary to function:
| Permission | Technical Justification |
|---|---|
| activeTab | Allows the extension to scan and read field labels on the currently active tab when the user clicks the extension action or opens the Side Panel. |
| scripting | Enables the injection of approved values into input controls using prototype descriptor setters, ensuring values persist properly in reactive frameworks (React, Vue, Angular). |
| storage | Used to store lightweight extension settings, such as active profile IDs and domain exclusion preferences (chrome.storage.local). |
| sidePanel | Provides the side-by-side review workspace where you inspect proposed fills, select answers, and resolve ambiguous questions without leaving the web page. |
| identity | Enables optional 1-click Google Sign-In if you choose to enable Cloud Sync to back up your profiles and document vault against local browser cache loss. |
Third-Party Sharing & Disclosures
FillDaForm does NOT sell, lease, transfer, or disclose your personal data to any third parties, advertisers, or data brokers. There are zero third-party SDKs, tracking pixels, or remote scripts embedded in the extension.
Data Retention, Export & Complete Wipe
Retention: Your data remains stored locally on your device until you choose to modify or delete it.
Optional Cloud Backup: If you choose to enable Cloud Sync, your backup data can be disconnected or deleted at any time directly from the extension settings or by performing a hard reset.
Export: You can export your entire database to a structured JSON file at any time via the Options page.
Complete Wipe: You can permanently delete individual profiles or perform a hard database reset in one click from the Options dashboard, instantly erasing all local IndexedDB records.
Developer & Privacy Inquiries
If you have any privacy questions, feedback, or security inquiries regarding FillDaForm: