Return Home

Privacy Policy

The official Privacy Policy of Form Recover. We operate on a strict Zero-Knowledge and Local-Only model. Your keystrokes never leave your device, and we do not track you.

Last Updated: January 20, 2026

At Form Recover, we believe that your data belongs to you. This Privacy Policy describes the ways we collect, use, store, secure, and protect personal information in connection with the Form Recover browser extension (“the Extension”).

1. Definitions

To clarify exactly what we handle:

  • “Vault Data”: Refers to the form drafts, text inputs, and history logs stored within the Extension on your local device. We do not have access to Vault Data. It is encrypted and stored locally.
  • “Administrative Data”: Refers to aggregate metrics provided to us by Google through the Chrome Web Store dashboard (e.g., daily installation counts). These are not collected by the Extension itself.

2. No Data Collection (Vault Data)

By default, Form Recover does not collect, transmit, or sync your Vault Data to any external server.

The Extension operates entirely locally on your device using chrome.storage.local and IndexedDB.

  • Zero Knowledge: We cannot see, read, or recover your saved drafts because they never leave your machine.
  • No Analytics: We do not use third-party analytics scripts (like Google Analytics or Mixpanel) inside the extension to track your typing or browsing behavior.

3. Sensitive Data Filtering

The Extension is explicitly designed to minimize risk by ignoring sensitive information. It is programmed NOT to save data from:

  • Fields marked as type="password"
  • Fields marked as type="hidden"
  • Common payment fields (Credit Card Numbers, CVV/CVC codes)

For a complete technical breakdown of blocked patterns (Tier 1 vs Tier 2), please see our Sensitive Data Policy.

While we strive to detect these fields automatically, we cannot guarantee 100% detection on every website due to non-standard coding practices by website developers. We recommend using the “Privacy Lock” feature (Master Password) if you share your device with others.

4. Data Retention & Deletion

You have complete control over your data retention:

  • Manual Deletion: You can delete specific drafts or clear all storage at any time using the “Clear All” button in the extension popup.
  • Uninstallation: If you uninstall the Extension from Chrome, all saved Vault Data is immediately and permanently deleted by the browser. Because we do not store your data on our servers, we cannot recover it for you once the extension is removed.

5. Security of Vault Data

We follow industry best practices to secure your local data:

  • Encryption at Rest: Vault Data is encrypted at rest using client-side encryption mechanisms on the user’s device before being written to storage.
  • Sandbox Isolation: The Extension operates within the browser’s secure sandbox, isolating your data from other websites you visit.
  • Session Storage: We use chrome.storage.session for temporary operational data (such as active tab status or one-time flags) which is stored only in memory and cleared automatically when you close the browser.

6. Children’s Privacy

The Extension is not directed to, nor intended to be used by, individuals under the age of 13. We do not knowingly collect Personal Information from individuals under the age of 13.

7. Explanation of Permissions

To fulfill its mission as a universal safety net, the Extension requires the following permissions:

  • storage / unlimitedStorage: Used to save your settings and ensure your local encrypted vault is not cleared by the browser when disk space is low.
  • scripting: Allows the extension to accurately restore text even on complex modern websites (SPAs).
  • host_permissions (<all_urls>): Required to protect your drafts on any website you visit. We act as a Local-Only Passive Observer; your data is never sent to us or any third party. Form Recover does not inject tracking scripts, advertisements, or network requests into visited pages.
  • offscreen: Used locally to process visual snapshots of form fields when requested.

8. Usage on Shared & Public Computers

Form Recover is a personal productivity tool designed for devices you own or control.

  • Public Risks: If you use this extension on a public computer (e.g., library, internet cafe, university lab), your drafts may be accessible to the next person who uses that computer unless you explicitly delete them.
  • Recommendation: We strongly recommend disabling the extension (via chrome://extensions) or using Incognito Mode (where extensions are typically disabled) when working on public machines. Alternatively, uninstall the extension to completely wipe all data.
  • Ethical Use: Do not install this extension on computers used by others without their knowledge. Using form recovery tools to capture data from other users without consent may violate privacy laws in your jurisdiction.

9. Changes to this Policy

We may update this Privacy Policy from time to time. If we make material changes to how we handle your data, we will notify you through the extension’s update notes or via the Chrome Web Store listing. The latest version will always be available on this page.

10. Contact Us

If you have questions about this policy or the extension’s behavior, please contact us via the support link in the Chrome Web Store or email us at support@formrecover.com.

Share this
The airbag for your browser