01. Introduction & Philosophy
This Privacy Policy explains how DevFill - Smart Dummy Form Filler ("we", "our", or "the extension") handles information across supported browsers, including Microsoft Edge, Google Chrome, Brave, and Chromium derivatives.
DevFill is built specifically for software engineers, QA testers, and web designers. Our philosophy is clear: Developer utilities must be transparent, private, and completely offline. DevFill operates entirely within your browser's client-side sandbox and makes no remote network requests for telemetry, tracking, or data collection.
02. Data We Never Collect
We do not collect, intercept, record, sell, or disclose any user information. Specifically, DevFill does NOT collect:
- Form Content & Input Data: Form fields on pages you visit are never extracted or sent anywhere. DevFill only generates and inputs synthetic test data locally.
- Keystrokes & User Credentials: We do not log keystrokes, passwords, credit card numbers, or session tokens.
- Browsing Activity & History: We do not record visited URLs, domains, or browsing habits.
- Personal Identifiable Information (PII): No names, email addresses, phone numbers, or IP addresses are harvested.
- Analytics & Telemetry: We do not use Google Analytics, Sentry, Mixpanel, or any tracking SDK.
03. Data Stored On Your Local Device
DevFill uses the standard browser storage API (chrome.storage.local / chrome.storage.sync) solely to preserve your developer settings across browser sessions. This data never leaves your computer.
Locally stored settings include:
- Locale Configuration: Your selected locale for dummy data generation (e.g., English, Spanish, Bengali).
- Password Generator Rules: Custom default test password or rule strings configured by you for registration forms.
- Custom Dummy Field Rules: Regex or name-matching criteria you specify in the options page to customize how specific inputs are filled.
- UI State: Toggle states such as auto-submit checkboxes or notifications preferences.
04. Browser Permissions Justification
In accordance with the Microsoft Edge Add-ons and Chrome Web Store Minimum Privileges Principle, DevFill requests only the essential permissions required to provide synthetic form filling functionality:
| Permission | Scope | Why It Is Strictly Required |
|---|---|---|
| activeTab | Active Tab Inspection | Allows DevFill to inspect form elements (inputs, textareas, selects) on the currently active tab when you explicitly trigger a fill action via the popup, context menu, or keyboard shortcut (Alt+Shift+F). |
| scripting | Content Script Injection | Required to execute the local form population script that safely dispatches native DOM events (input, change) for React, Vue, and Inertia.js compatibility. |
| storage | Local Sandbox Storage | Required to save your preferred generator locales, custom test password preferences, and field matching settings on your device. |
| contextMenus | Right-Click Actions | Enables convenient right-click options (e.g. "Fill with Test Email", "Fill Entire Form") directly on editable form elements. |
05. Remote Code Compliance
DevFill strictly adheres to Manifest V3 security mandates:
- No Remote Code Execution: DevFill does not download, evaluate, or execute any external JavaScript, remote WebAssembly, or CDN-hosted libraries.
- Self-Contained Bundle: All generators, mock datasets, dictionaries, and utility scripts are 100% packaged and compiled locally inside the extension archive.
06. Third-Party Sharing
Because DevFill operates entirely offline and collects zero personal data, no user data is ever sold, leased, transmitted, or shared with third parties, advertisers, or data brokers.
07. Data Retention & Deletion
We operate no remote databases or backend servers. When you uninstall DevFill from your browser (edge://extensions or chrome://extensions), your browser immediately purges all locally stored preferences.
08. User Rights (GDPR & CCPA)
Under the European General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA):
- Right to Access: All saved preferences exist in plain JSON in your local browser sandbox.
- Right to Erasure: You can wipe all data at any moment by clearing extension data or uninstalling.
- Right to Non-Discrimination: We do not track, profile, or monetize users.
09. Children's Privacy (COPPA)
DevFill is a developer utility designed for developers and QA engineers of all ages. We do not collect or solicit personal information from children under 13 years of age.
10. Contact & Open Source Information
DevFill is open source and licensed under the MIT License. If you have any questions or feedback regarding this Privacy Policy, please contact us:
Developer: Sakhawat Hossain
Portfolio & Website: https://sajusun.github.io
GitHub Repository: github.com/sajusun/devfill
Microsoft Edge Add-on: DevFill on Microsoft Edge Store
Support & Feedback: Submit an Issue on GitHub