Last updated: 28 July 2026

What we collect

Nothing. ZapForm does not collect personally identifiable information, browsing history, location, or any other user data. We do not use analytics, tracking, or telemetry of any kind.

Data stored on your device

ZapForm saves your information locally on your own device, using the browser's built-in local storage. This never leaves your browser and is never sent to us or anyone else. It consists only of:

• Saved form text — the text you type into form fields on sites you have enabled, so it can be restored if the page reloads, crashes, or is closed. This is stored per website.
• Settings — your preferences, such as how long saved text is kept (the retention period).
• Paused-site list — the websites on which you have chosen to pause saving.

You can browse, search, and delete your saved text at any time from the extension's "Saved text" page, clear an individual site or all sites from the popup, or remove everything by uninstalling the extension. Saved text is also deleted automatically once it passes your chosen retention period.

What ZapForm never saves

Because ZapForm captures text you type, it is built to exclude sensitive fields automatically. It never saves:

• Passwords — always excluded, with no option to enable.
• Payment and credit-card fields — including card numbers, expiry, and security codes.
• One-time codes, security codes, and other sensitive inputs — such as fields for verification codes, bank account numbers, or national IDs.

These exclusions are enforced by the extension's code and cannot be turned off. Detection is based on field type, field names and labels, form context, and the shape of the value itself (for example, values that look like a valid card number are dropped even in a generically named field).

How your form text is used

To save and restore your input, ZapForm reads the values of form fields locally, and only on sites you have explicitly enabled. This information is used solely to provide the save-and-restore feature and is stored only in your browser's local storage. It is never logged, transmitted, or shared. ZapForm does not run on any website until you enable it, and it does not read page content beyond the form fields needed to provide its feature.

Permissions

ZapForm requests only the permissions required for its features:

• storage — to save your form text, settings, and paused-site list locally on your device.
• scripting — to add its save-and-restore functionality to pages you have enabled.
• activeTab — to act on the tab you are currently working in when you use the extension.
• contextMenus — to add right-click options for restoring saved text.
• alarms — to periodically delete saved text once it passes your chosen retention period.
• Site access (optional) — ZapForm requests access to a website only when you enable it there (or choose to enable it on all sites). It installs with no access to any site, and never runs anywhere you have not enabled it.

Donations

Supporting ZapForm is entirely optional. If you choose to donate, the "Buy me a coffee" link opens a checkout page hosted by our payment provider (Lemon Squeezy) in a new browser tab. Any payment information you enter is handled directly by that provider on their own page — ZapForm never sees, receives, or stores any payment details.

Third parties

We do not sell or transfer any user data to third parties. ZapForm runs entirely on your device and integrates with no external services, analytics, or tracking of any kind.

Changes to this policy

If this policy changes, the updated version will be posted at this URL with a revised "last updated" date.

Contact

For any questions about this policy, contact: elaboussi.ayoub@gmail.com.