100% LOCAL & PRIVATE

FillOnce Privacy Policy

Effective Date: September 23, 2026 | Version 1.0

Core Commitment: FillOnce operates completely on your local machine. We do not collect, transmit, sell, or view your personal profile data, form inputs, or browsing history. Zero user data leaves your computer.

1. Information Collection and Storage

FillOnce is designed from the ground up as a local-first browser extension.

Local Storage Only: All profile information (name, email, phone, links, work experience, education) and custom question answers are stored exclusively in your browser's local sandbox (chrome.storage.local and IndexedDB).
No Accounts: FillOnce does not require you to create an account, log in, or provide any credentials.
No Remote Servers: There are no backend databases or analytics endpoints collecting your profile data.

2. Network and Outbound Requests

FillOnce does not transmit your personal data across the network.

Zero Telemetry: We do not include tracking pixels, usage analytics, Google Analytics, telemetry libraries, or crash-reporting SDKs.
Zero Outbound Data: Form contents, matched field labels, and profile entries are never sent to external servers.
Local-First Operation: All field recognition heuristics, fuzzy matching algorithms, and repeating block parsers run locally in your browser process.

3. Browser Permissions Explanation

FillOnce requests only the absolute minimum permissions necessary to perform form filling:

activeTab: Grants temporary access to inspect and fill the form on the currently active tab only when you explicitly invoke FillOnce (by pressing the shortcut Alt+Shift+F or clicking the extension popup). It does not provide continuous background access to all tabs.
scripting: Used to execute the form filling script on the active page upon your explicit action.
storage & unlimitedStorage: Used to save your profiles, field mappings, and local backups locally on your device.
contextMenus: Provides the optional right-click "Fill with FillOnce" entry for convenient access.

4. Automatic Form Submission Policy

Important Guarantee: FillOnce will NEVER automatically submit any form. FillOnce only populates form fields. Reviewing the filled content and clicking the final "Submit" or "Apply" button is always 100% under your manual control.

5. Data Retention and Control

Because your data is stored locally:

You can edit, duplicate, export, or permanently delete any profile directly from the Settings page at any time.
Uninstalling the extension immediately and permanently removes all stored data from your browser.
You can export your profiles as unencrypted JSON backups to store or move them between devices manually.

6. Contact Us

If you have questions about this privacy policy or the FillOnce extension, please open an issue or contact our maintainers through the official repository:
https://github.com/zachyuan/fillonce