Chrome Extension

Privacy Policy — Form Draft Guard

Last updated: July 13, 2026

Form Draft Guard exists to protect your words, and protecting your privacy is part of the same promise. Here is exactly what it does and does not do — please read the "What it leaves alone" section especially.

The short version

Your drafts never leave your device. Form Draft Guard auto-saves what you type in comment boxes and long text fields to your browser's local storage, so a crash or a misclick can't erase it. It has no server, sends nothing to us or anyone, and contains no analytics or tracking. The only network contact the extension makes is the payment provider's anonymous plan check (ExtensionPay), which runs for all users and sends no personal data — plus the optional one-time Pro upgrade via Stripe (see Payments below).

How it works

As you type in a qualifying comment box or text field, the extension saves your text locally, in the background, and lets you restore it later with one click from the popup. Drafts are grouped by the page they came from and expire on their own. Everything happens inside your browser.

What it leaves alone

This is the important part. Form Draft Guard is deliberately narrow:

• It never saves password fields. Any password-type input is turned away outright — this is a hard rule, not a guess.
• It is built to skip payment and secret fields. Fields for credit-card numbers, security/verification codes (CVV/CVC/OTP), one-time codes and 2FA, PINs, SSNs, bank/routing/IBAN numbers, API keys, and recovery/seed phrases are spotted and left alone — by their input type, their autocomplete hint, and by their name, id, label text, aria-label, or placeholder, in several languages. It leans toward not saving: if a field looks even slightly sensitive, it is skipped.
• It only saves long-form text fields — text areas, rich-text/comment editors, and plain text/search/URL inputs — and only between about 25 and 100,000 characters. It skips checkboxes, dropdowns, and email/phone/number-typed fields.

No automatic detector is perfect, so Form Draft Guard also gives you full control: you can pause auto-save at any time, delete any saved draft, and clear everything in one click. If you ever notice something you'd rather not have saved, one click removes it — and nothing ever leaves your device regardless.

What it stores, and where

Everything is stored on your device via chrome.storage.local — local storage that Chrome does not sync to any server or other device:

• Your drafts — the text you typed, the field it came from (its page address and a field identifier so it can be restored), and a short label such as the field's name. Pro keeps a few recent versions per field; Free keeps the latest.
• Your plan record (Free or Pro) and your pause setting.

Drafts expire on their own — after 7 days on Free, 30 days on Pro — and you can delete any draft, or clear all of them, from the popup at any time.

The bundled ExtensionPay payment library keeps its own small, anonymous plan record. Unlike your drafts (which stay strictly local to this device), ExtensionPay stores that record in Chrome's synced extension storage, so if you're signed in to Chrome it syncs across your browsers via your Google account.

What we send anywhere

Your drafts, and everything about the pages you type on, are never transmitted — not to us, not to any third party. There is no draft server. Capture and storage happen entirely in your browser.

The one network contact the extension makes is with ExtensionPay (extensionpay.com), the payment provider: it checks your plan status (Free or Pro) using an anonymous identifier — at install, at browser startup, and periodically while the extension runs. It sends no personal information and nothing about what you type.

Payments (optional Pro)

Pro is a one-time purchase — a single payment of $5.99, not a subscription, and nothing recurring. It is handled by ExtensionPay (https://extensionpay.com), which uses Stripe for secure payment processing. If you upgrade, ExtensionPay handles your email and payment details solely to complete that one-time purchase and remember that you own Pro. We never see or store your card information. If you don't upgrade, no payment data is collected.

• ExtensionPay: https://extensionpay.com/privacy
• Stripe: https://stripe.com/privacy

Permissions, explained

• storage — to keep your drafts and settings on your device.
• content script on the sites you visit (http / https) — this is how the extension can auto-save your text where you type it. The script runs locally in the page, applies the "what it leaves alone" rules above, talks only to this extension's own local storage, reads nothing beyond what you type into a qualifying field, and sends nothing to the network. It is not injected on extensionpay.com beyond the payment library's own page.
• host access to extensionpay.com (https://extensionpay.com/*) — required by ExtensionPay to confirm your plan and handle the optional one-time Pro upgrade.

Data retention

Drafts expire on their own — after 7 days on Free and 30 days on Pro — and are cleared automatically as you keep using the extension. You can delete any single draft, or clear all of them, at any time from the popup. Uninstalling the extension removes all locally stored drafts and settings.

Children

Form Draft Guard is a general-purpose utility and is not directed at children under 13. It collects no personal information from anyone.

Changes

If this policy ever changes, the updated version will be posted here with a new "Last updated" date.

Contact

Questions can be sent to: extensions@edenapps.app