FormSession is designed with privacy in mind. Your form data is stored locally on your device and is never sold or shared with third parties.
1. What We Collect
FormSession collects the following information:
Form data — values from HTML form fields (text inputs, dropdowns, checkboxes, etc.) on websites you have explicitly whitelisted. This data is stored locally in your browser using Chrome's storage API and never transmitted to our servers.
Installation ID — a randomly generated identifier created when you install the extension. This ID is used solely to manage your subscription status and trial period. It contains no personal information.
Subscription status — whether your trial is active or you have a paid subscription. This is stored on our servers (Cloudflare Workers + D1) linked only to your installation ID.
2. What We Do NOT Collect
We do not collect your name, email address, or any personal identifiers unless you voluntarily provide an email during checkout.
We do not read, transmit, or store the content of your form data on any server.
We do not track your browsing history or the URLs you visit beyond what is necessary to match saved sessions to the correct page.
We do not use cookies or third-party analytics.
We do not sell your data to anyone, ever.
3. How We Use Your Data
The installation ID is used exclusively to:
Check whether your free trial is still active
Verify an active paid subscription
Link a payment to your installation after checkout
Form data you save stays entirely on your device and is never uploaded to any server.
4. Data Storage
Form session data — stored locally in Chrome's storage.local API on your device only.
Installation ID and subscription status — stored on Cloudflare's infrastructure (Workers KV and D1 database) in the European Union region.
Payment data — handled entirely by Paddle, our authorized reseller and Merchant of Record. We never see or store your credit card details. Paddle's privacy policy applies: paddle.com/legal/privacy.
5. Data Sharing
We do not share your data with any third parties except:
Cloudflare — infrastructure provider for our backend (installation ID and subscription status only).
Paddle — authorized reseller and Merchant of Record (only if you purchase a subscription).
Both providers are GDPR-compliant.
6. Your Rights (GDPR)
If you are located in the European Union or Ukraine, you have the right to:
Request access to the data we hold about you (installation ID and subscription status)
Subscription and installation data is retained as long as your account is active. If you uninstall the extension and do not use it for 24 months, your installation record may be deleted from our servers. Local form data is deleted when you clear your browser data or uninstall the extension.
8. Children's Privacy
FormSession is not directed at children under 13. We do not knowingly collect data from children.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of significant changes by updating the date at the top of this page. Continued use of the extension after changes constitutes acceptance of the updated policy.
10. Contact
If you have any questions about this Privacy Policy, please contact us at: alexsheldesign@gmail.com