Privacy Policy

Form ReDraft is a Chrome extension that keeps a local copy of text you type into forms and editors, so you can get it back after a reload or a crash. This policy explains what Form ReDraft records, where it stores it and who can see it.

The short version: Form ReDraft has no server, makes no network requests and shares nothing with anyone, including the developer.

Information We Do Not Collect

We do not collect any of the following, because Form ReDraft has no code that could transmit it:

• No account, no email address, no name and no user identifier.
• No analytics, no telemetry, no crash reporting and no usage statistics.
• No advertising, no profiling and no data broker integration.
• No remote configuration, no update check and no remote code.
• No access to your browsing history outside the page you are currently on.

The extension contains no fetch call, no XMLHttpRequest, no WebSocket and no beacon. You can confirm this yourself: search the extension source for those strings and you will find none.

What Form ReDraft Stores on Your Device

Form ReDraft stores the following, and only the following, in your browser profile:

• Draft text. The content of fields you type into, filtered and encrypted before it is written.
• Where it came from. The page address with credential-bearing query parameters stripped, the page title and an identifier for the field.
• When and how much. A timestamp and a word count.
• Your settings. Retention limits, paused sites and your own field patterns.

Draft values are encrypted with AES-GCM using a random 256-bit key generated on your device when Form ReDraft is installed. The key is kept in local browser storage so your drafts remain readable after a browser restart.

Be clear about the limit of that protection. It keeps stored values out of plain sight in browser storage, in backups and in disk artefacts. It does not protect against malware or anyone who already has administrative access to your profile, because the extension has to be able to read the key in order to decrypt anything.

What Form ReDraft Refuses to Store

Some fields are never recorded, and there is no setting to change that:

• Password fields, hidden fields, card fields, security code fields and one-time code fields.
• Fields whose identifier, class, label or placeholder contains a credential word such as password, passcode, cvv, social security, pin, token or secret.

Where a secret appears inside ordinary prose, such as a card number typed into a message body, Form ReDraft replaces it with [redacted] before storing anything. If redaction leaves nothing behind, no draft is created.

Permissions and Why They Are Needed

• storage holds your drafts and settings in your browser profile.
• alarms runs the hourly cleanup that applies your retention window.
• activeTab is granted when you click the Form ReDraft icon. It lets the popup send a restore to the page you are looking at, and nothing more.

Form ReDraft requests no host permissions. Its content script runs on ordinary web pages through the standard content script match patterns, which means it cannot read a page you have not opened.

Where Form ReDraft Records

Form ReDraft records nothing until you tell it where it may. On first run it asks whether it should record only on sites you turn on, which is the default it offers you, or on every site except a blocked list.

Whichever you choose, a line in the popup always states whether recording is on for the site you are looking at. Recording can be turned on or off for any site in one click, and the whole extension can be switched off from the settings page.

Form ReDraft ships with a list of domains it will never record on, covering banking, payment, email, identity and developer console sites. That list is editable. Removing a line is permanent unless you press the button that restores the shipped list.

Private Browsing

Form ReDraft does not record anything in a private browsing window unless you explicitly turn that on in the settings. The default is off, because drafts recorded in a window that disappears are easy to forget.

Third-Party Services

Form ReDraft integrates with no third-party service. There is no analytics script, no advertising network, no payment processor inside the extension and no third-party domain in the manifest.

This page and the rest of this website are hosted on Firebase and use Google Analytics to count visits, which is a separate matter from the extension. The analytics applies to this website, not to Form ReDraft, and it records no information about what you type.

Deleting Your Data

You can delete everything Form ReDraft holds at any time. The settings page has a delete everything button that clears all stored drafts. Removing the extension from Chrome deletes the rest, because everything Form ReDraft stores lives in the extension profile.

Children

Form ReDraft is a general-purpose utility and does not knowingly collect personal information from anyone, including children, because it does not collect personal information at all.

Changes to This Policy

If this policy changes, the effective date at the top of this page changes with it and the extension description in the Chrome Web Store is updated to match. Material changes are announced on the Form ReDraft blog.

Contact

Questions about this policy can go to the contact page. If you believe Form ReDraft has stored something it should not have, that is a bug worth reporting directly.