FFormFiller

Privacy Policy

Last updated: this page describes how FormFiller currently works. If that ever changes — for example if a future feature needs to process a file on a server — this page will be updated first, and that processing will be clearly disclosed before it happens.

Your documents never leave your device

Every part of FormFiller's core functionality — opening a PDF, reading its form fields, letting you type, draw, sign and place content, generating the final file, and letting you download it — runs entirely inside your own browser, using your device's own processing power. Your PDF is never uploaded to a server, never transmitted over the network, and never seen by anyone but you.

You can verify this yourself: with your browser's developer tools open to the Network tab, no request containing your document, form values or signature is ever sent while you use the tool.

What is stored, and where

Some information is saved locally in your browser — using standard web storage (localStorage and IndexedDB) — purely so the tool can be more convenient to use. None of it is sent to a server. This includes, only if you choose to use these features:

  • An in-progress document, so you can resume filling it out if you close the tab (kept for up to 24 hours, then automatically deleted).
  • Signatures or initials you choose to save for reuse.
  • An optional “My Details” profile (name, email, phone, address and similar) you fill in yourself to speed up autofill. This deliberately excludes sensitive identifiers such as passport, government ID, bank account, medical or tax ID numbers — please don't enter that kind of information into it.
  • Small preferences, like your preferred date format.

You can clear any or all of this at any time from within the tool — there's a Delete / Clear option next to each of these features, and a “clear all local data” option that removes everything at once.

Analytics

Analytics are not currently enabled on this site. If that changes in the future, this section will be updated first, and — as with document processing — analytics will never include your document's content, form values, file names, or anything you type, draw or sign.

Advertising

This site does not currently show ads. The codebase includes a placeholder for a future ad slot, gated behind configuration that hasn't been turned on — if ads are enabled in the future, this page will be updated to describe exactly what that involves.

What this tool does not do

  • It does not require you to create an account or provide a password.
  • It does not verify your identity or the authenticity of any signature.
  • It does not submit your completed form to any government agency, employer or third party — you decide where the downloaded file goes.
  • It does not execute embedded scripts that may exist inside a PDF you upload.

Contact

Questions about this policy can be sent to support@pdf-form-filler.example.com.