Privacy

Form Pilot is built so that there is nothing to trust: no account, no server, no tracking.

What is stored, and where

• Your profiles are kept in the browser's extension storage on your computer, encrypted with your master password. Only encrypted data is written to disk.
• The unlocked vault lives in memory while you use it and is locked again after the time you set, or when the browser closes.
• If you turn on Touch ID or Windows Hello, a second key is protected by your device's authenticator. It never leaves the device.
• Uninstalling the extension removes everything it stored.

What happens on a page

• When you click the icon or use the right-click menu, Form Pilot reads the fields of that page and matches them to your profile inside the browser.
• Nothing about the page or your profile is sent anywhere. There is no server involved in a fill.
• Form Pilot never presses Submit or any other button.

The one download

Document import needs a language pack of about 600 MB. Form Pilot downloads it once, when you ask, from huggingface.co into the browser's private storage. After that, import works offline. The download carries no information about you; it is the same file for everyone. You can remove it from Settings at any time.

Optional cloud matching

Off by default. If you paste your own TypeSafe API key in Settings, matching fields to your profile happens in their service instead of on your device, which helps on forms in languages other than English. For each field Form Pilot sends the form's title, the field's label and what is currently typed in it, and the names of your profile lines, for example "Phone" or "Passport number", never their values. The key is kept inside the encrypted vault. Turn it off in Settings at any time.

Analytics and contact

The extension and this website have no analytics. Questions go to bshk.app.

Last updated 21 September 2026.