FoxFill Privacy Policy
FoxFill is a Chrome browser extension that fills web forms from a profile you manage on your own device. This policy explains what data FoxFill handles and what it does not do.
Single purpose
FoxFill fills web forms from a user-managed profile stored only on the local device. You scan a page, review matched fields, and choose what to fill.
Data stored on your device
-
Profiles - the details you enter (for example name,
address, email, phone, ID number, passport number, date of birth, or
custom fields) are saved in Chrome's extension storage on your
computer (
chrome.storage.local). You may keep multiple named profiles. -
Settings - your FoxFill preferences (for example
whether the page button is on) are also saved in
chrome.storage.local. -
Unlocked session - when encryption is on and you
unlock FoxFill, a working copy of your profiles and the unlock key are
kept in
chrome.storage.session, which is held in memory and cleared when Chrome closes. Your passphrase and recovery code are not written to storage.
Encryption and recovery
Encryption is optional. If you set a passphrase, your profiles are encrypted on this device with AES-GCM (256-bit), using a key derived from your passphrase with PBKDF2-SHA-256. When you turn encryption on, FoxFill shows a one-time recovery code; a copy of your profiles is encrypted with that code so you can unlock if you forget the passphrase. If you give a recovery email, only a one-way hash of it is stored, as a check when you use the recovery code. Older vaults set up with email recovery keep that earlier recovery copy until you set a recovery code.
FoxFill has no server. Nobody, including the developer, can see or reset your passphrase or recovery code.
What we do not collect
- No FoxFill account, cloud sync, or remote profile backup
- No analytics, advertising, or usage tracking
- No sending of your profile data to any server
- No sale or transfer of your profile data to third parties
- No filling of website password fields
- No background scanning of the pages you visit
Permissions
- storage - save your profiles and settings on this device (profiles optionally encrypted).
- activeTab - temporary access to the tab you are on when you open FoxFill and click Scan or Fill.
- scripting - run FoxFill's scanner, matcher, and filler on a page only after you click Scan or Fill, or press the page button.
-
Optional site access (
http://*/*,https://*/*) - requested only if you turn on the page fill button, so the button can appear on pages. It is off by default, and you can turn it off or remove access at any time. Popup Scan and Fill work without it.
FoxFill does not use remote code. All scripts ship inside the extension package.
Website interaction
On your command, FoxFill reads form field labels and structure on the current page to match them to your local profile, may highlight fields, and writes the values you approved into the page. Fill skips fields that already have a value; the page button fills empty fields only and never clears what is already there; the popup's Clear & set replaces only the fields you tick. FoxFill does not submit forms.
The optional Support button opens a PayPal page in a new tab only when you click it; FoxFill sends no profile data with it.
Contact
Questions about this policy: support@foxbytelabs.co.za · GitHub