FormCarbon Privacy Policy

Effective: October 22, 2026

This policy explains how Quillfold ("we") handles information in the Chrome extension "FormCarbon" (the "extension").

1. What is stored on your device

The extension stores the following in the browser's extension storage (chrome.storage.local). It does not use chrome.storage.sync, so nothing is synced to Google's servers.

• Profiles: the name, address, contact and work details you enter, fields you add yourself, saved snippets, and the choices it remembers per site.
• Test-data settings (Developer mode). If you enter your own email address to build email aliases, that is stored too.
• The site list: per-site on/off, the profile last used, and whether "Fill on open" is on for the site and with which profile.
• Per-site remapping: a field's identifier and the name of the item to use for it. The values you fill in are not included.
• Settings: display language, theme, panel width, the auto-check consent setting, Developer mode on/off, and markers for which hints you have already seen.
• Pro license information (only if you enter a key; see section 5).
• The start date of the Pro trial (section 9).

This data is not encrypted, in the same way as the browser's built-in address autofill. Anyone who can use this browser profile on this device may be able to read the extension's stored data. On a shared computer, do not store real personal information.

2. What is never sent

Your profiles, the contents of the page you have open, the values you fill in and your browsing history are not sent to us or to any third party. The extension contains no code for analytics, advertising, crash reports or error reporting, and it sets no cookies. Nothing is sent to an address you set for email aliases either (the extension only checks that the address is well-formed, not whether it exists).

3. Access to pages

• The extension reads only the top-level page (top frame) of the tab where you pressed the toolbar icon or the shortcut. It looks at the form's structure (field types, names, labels and so on) to build a preview of what would be filled. It does not read other tabs or run at other times.
• It writes into the page's fields only when you press "Fill" in the preview. After filling it does not press any submit button; it only moves focus.
• Fill on open (Pro): only on sites where you turned it on and granted the browser permission, the extension inspects the form when the site opens and fills it without a preview. It fills only the rows marked for automatic filling and never submits. You can withdraw the permission at any time by switching the site off under "Sites" in the settings, or from the site access page of chrome://extensions.
• Only when you save a snippet, the extension reads the text of the field where you pressed Save and stores it. Otherwise it looks only at whether a field is empty and how many characters it holds. It does not read password fields, card numbers, one-time codes or hidden fields.

4. Export and import

From the settings page you can export your profiles and other data to a file. The file is saved only where you choose.

• A plain file is ordinary JSON that anyone can read. It includes the email address you entered for aliases. The screen warns you of this.
• A passphrase-protected file (creating one is a Pro feature) is encrypted with AES-GCM (256-bit). The key is derived from your passphrase with PBKDF2 (SHA-256, at least 600,000 iterations). The passphrase is not stored. If you forget it, the file cannot be opened, and we cannot recover it either.
• The license key is not included in an export. An import writes nothing until you choose a file and press "Import".

5. Network requests

The extension makes only one kind of network request. Only if you enter a Pro license key, it contacts Polar's license service (api.polar.sh); Polar is the seller of Pro. If you do not enter a key, the extension makes no network requests at all.

• When: when you activate a key, when it re-checks the key (at most once every 24 hours), and when you press "Remove license".
• What is sent: the license key, FormCarbon's organization ID on Polar, and this browser's activation ID. On activation it also sends the fixed label "FormCarbon" (Polar requires a label; it contains nothing about you or your device). On re-checks it also sends a fixed ID that identifies the FormCarbon license (the same value for every user).
• What is not sent: profiles, page contents, values you fill in, browsing history.
• As with any web request, your IP address and browser information reach Polar. Polar's handling is governed by Polar's privacy policy.
• If the network is unavailable, Pro stays on for up to 14 days after the last successful check.

You buy Pro on Polar's page and enter your email address and payment details there. To answer inquiries, we receive order information from Polar (such as your email address and what you bought), but we never receive card details. Updates to the extension are delivered by the browser from the Chrome Web Store; the extension plays no part in them.

6. Developer mode

When Developer mode is on, the extension generates fictitious test data (name, address, email and so on) and fills it into fields. A throwaway test password and the test card numbers published by payment providers are filled in only when you choose them from the menu, on the spot. These values live only inside that page; they are neither stored nor sent (they are not part of profiles, settings or exports).

7. What it does not handle

• Card numbers, passwords and one-time codes are neither stored nor read. Saved profiles never fill them (the only exception is the test values of Developer mode in section 6).
• Boxes for terms of service, privacy consent and similar are not checked automatically by default. Only the rows you check in the preview are filled. If you turn on auto-check in the settings, only the consents required to submit are shown as checked before filling (you can uncheck them), and optional mailings such as newsletters are never checked. Your consent choices are not stored (only the setting itself is stored).

8. Permissions and why they are needed

The extension does not ask for access to all sites (<all_urls>). It does not read your browsing history and does not load or run remotely hosted code.

9. The 14-day trial

Pro can be tried for 14 days from installation without a key. To do this, the extension stores the install date on this device (chrome.storage.local). It makes no network request, and the days are counted entirely on your device. The date is not part of exports and is kept even after "Delete all data" (so a file cannot be used to restart the trial). It is removed when you uninstall, so reinstalling starts a new 14 days.

10. How to delete your data

• "Delete all data" on the settings page deletes your saved profiles and other data.
• Under "Sites" in the settings you can clear the site list and, for each site, use "Delete this site's records" (its list entry, remembered remapping, and the choices stored for it in profiles). Saved choices can also be deleted one by one.
• "Remove license" deletes the license information and cancels this activation.
• Uninstalling the extension makes the browser delete all of its stored data.

11. Chrome Web Store User Data Policy

The use of information received from the browser complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. We do not sell, rent or share data, and we do not use it for any purpose unrelated to the extension's single purpose: filling the forms of the page you have open with your saved profiles.

12. Changes

If the way data is handled changes, we update this page and its effective date before the change applies.

• October 19, 2026: first version

13. Operator and contact

Operated by Quillfold. Contact: support@quillfold.dev

Back to FormCarbon