Your details stay on your device.

Fillmore is a Chrome extension that fills web forms from documents you give it. This page says exactly what it keeps, where, and what leaves your device. There is no Fillmore server: I, Vinit Churi, never receive your documents, your details or what you do with the extension.

What Fillmore keeps, and where

• Your profile: the details read from your documents or typed by you (name, date of birth, address, passport number and similar), each with the document it came from. Stored in Chrome’s local extension storage on this device.
• What you type into forms, when you submit them: details Fillmore recognises are added to your profile so it can fill them next time. It tells you each time, with Undo, or asks first if you choose that. Passwords, payment cards, one-time codes, hidden fields and other people’s details are never kept.
• Files, only when you choose: a file you attach to a form’s upload field (such as a resume), or a document you add with “Keep a copy” ticked, is kept in the extension’s own storage so it can be attached to the next form that asks for one. Otherwise documents are read and dropped; only the details found in them are kept.
• Settings, answers you asked it to remember for a site, and where you dragged the penguin.

If you set a passphrase, your profile and kept files are encrypted (AES-256-GCM) with a key derived from it, and the unlocked key is held only in memory until the browser closes.

What leaves your device

Nothing, unless you add your own Anthropic (Claude) API key in Settings. With a key, and only for these tasks:

• Reading a photo or scanned PDFyou add: the file is sent to Anthropic’s API to read the text. Text files and PDFs with text are read on your device.
• Fields the built-in rules can’t place: those fields’ labels, hint text, section headings and dropdown choices, with the names of the kinds of details you have (for example “date of birth”). Never the values.
• Explaining a confusing field: the page title and the labels, hints and dropdown choices of that field and other unclear fields on the form (explained together, once). Never your details.

These requests go straight from your browser to Anthropic under your key and are covered by Anthropic’s privacy policy. Fillmore has no analytics, no tracking, no ads, and sells or shares nothing.

What Fillmore does on web pages

It reads a page’s form fields only on a tab where you open it, or on sites you allowed the penguin on. It fills fields only when you press Fill, never presses Submit, and never fills passwords, payment cards, CAPTCHAs or hidden fields. Page content is not sent anywhere, except the field labels described above.

Deleting your data

Deleting a document in Fillmore deletes every detail and file that came from it. Settings → Wipe deletes everything at once. Removing the extension from Chrome deletes all of its storage.

Contact

Questions or requests: hello@vinitchuri.me. If this policy changes, the date at the top changes with it.