Fillright collects nothing, sends nothing, and has nowhere to send it to. No account, and no way to create one. No analytics, no telemetry, no crash reporting. No server. The extension makes no network requests of any kind.

WHAT IS STORED, AND WHERE
Your profiles are kept in this browser's local storage. Sync storage is never written, so they do not travel to your browser account or to other devices. Export exists so the data stays yours: it produces a plain file you control. A licence key, if you buy one, is stored the same way and verified inside the extension against a public key built into it; activating one contacts nothing.

WHAT FILLRIGHT REFUSES TO TOUCH
Password fields, card numbers, security codes and one-time codes are refused outright. This is enforced in the matching code rather than as a setting, and it applies to fields you name yourself as well.

WHAT IT CAN REACH
It declares no content script and no host permissions. It can reach a page only when you press the button or the shortcut. If you switch on "allow on every site" so the shortcut works everywhere, that permission is requested at that moment and can be revoked from the same checkbox.

Full policy: https://local-extensions.vercel.app/privacy.html