Privacy Policy for Form Autofill Pro

Last updated: November 6, 2026

This policy explains how the Form Autofill Pro browser extension for Chrome and Firefox handles your information, and how the project website handles visits.

In short: what you save stays in your browser. The extension has no servers, no accounts and no analytics, and it does not send your data to us or to anyone else.

1. Data the extension stores on your device

The extension uses your browser's local extension storage. The following stays on your device:

• Profiles: the field names and values you choose to save, the profile name, the address of the page it was captured from, the sites linked to it, and when it was created and updated.
• Settings: your preferences, theme and ignored sites.
• Local counters: how many times you captured and filled forms, used only to decide when to show a request to support the project.
• Sites with a form notice: in the default Smart notice mode, the domain of each site where the extension showed its first notice about a form with five or more fields, so it does not repeat that notice. Other notice modes do not add to this list.
• Encryption key: a random key created on your device (see section 4).

To limit how often the form notice appears, the extension also keeps one timestamp, autofill-last-notification, in the local storage of the website you are on. It contains only that time, and the website could read it.

2. When the extension reads a page

The extension runs on the pages you visit so it can detect form fields and show its icons. While a page is open it reads the fields and their current contents in memory, and it does not save them.

Field values are saved only when you ask, for example with "Capture this form" or Ctrl+Shift+C. Forms are filled only when you ask, using the popup, a field icon or Ctrl+Shift+F.

3. Data leaving your device

The extension makes no network requests of its own. It does not transmit, sync or back up your data, and it contains no analytics or advertising.

Data leaves your browser only in two cases, both started by you:

• Filling a form: values are placed in the page you chose. That website receives them under its own terms if you submit the form.
• Exporting a backup: a file is saved where you choose. What happens to that file is up to you.

We do not sell, trade or share your information. We do not receive it in the first place.

4. Security

Values in fields whose names look sensitive, such as password, CPF, card, token or account, are encrypted with AES-GCM 256-bit before being stored. Other values, such as names, emails and addresses, are stored without this encryption. The detection is based on the field name, so a sensitive value in a field with an ordinary name may not be encrypted.

The encryption key is kept in the same local storage as your data. This protects stored values from casual reading, but it does not protect them from someone or something with access to your browser profile. Keep your device, browser and operating system secure and up to date.

Backups can be exported in three ways:

• Encrypted: can be opened only in the browser that created it.
• Password-protected: can be opened in another browser with the password you set. We cannot recover a lost password.
• Plain text: not encrypted. Anyone with the file can read everything in it, including passwords, so store it carefully.

5. Permissions

• Storage: to save your profiles and settings locally.
• Active tab and scripting: to read and fill forms on the page you are using.
• Downloads: to save the backup files you export.
• Access to all websites: so that the extension can detect and fill forms on any site you use it on.

6. Your choices

You can edit or delete any profile, add sites to the ignored list, or turn the form notice off in the settings. Removing the extension deletes what it stored in your browser. Backup files you exported are not affected and must be deleted separately.

7. Third parties

• Browser stores: Google and Mozilla run the stores where you install the extension, under their own privacy policies.
• Ko-fi: the extension links to our Ko-fi page. Ko-fi receives information only if you choose to open that link, under its own privacy policy.

8. This website

The project website uses no cookies, analytics or advertising. It is hosted by Cloudflare, which processes technical data needed to deliver the pages, such as your IP address, under the Cloudflare privacy policy.

9. Changes to this policy

We may update this policy. Changes are published on this page with a new "Last updated" date.

10. Contact

For privacy questions, write to globalmarketorbit@gmail.com.