Typeback — Privacy Policy

Last updated: 24 July 2026

Short version. Typeback does not collect, transmit or sell any data. There is no server, no account and no analytics. Everything Typeback saves stays inside your browser, on your device, and you can delete all of it at any time from the extension popup.

What Typeback stores

To recover text you have typed, Typeback saves the following locally, in your browser's IndexedDB storage:

the text you typed into web forms and editors
the address, page title and field label of where you typed it
timestamps and a size estimate
your settings: retention period, excluded sites, on/off state

What Typeback never stores

Regardless of your settings, Typeback does not save:

password fields, or any field whose name or label indicates a password, PIN, passphrase or secret
payment data: card numbers, CVV/CSC codes, IBANs
one-time codes, verification codes and API keys
text on banking, payment or password-manager websites
text typed in incognito windows, unless you explicitly enable it
any field marked by a site with data-typeback="off"

Values are also checked before storage and discarded if they look like a card number, IBAN, JWT or API key.

Where the data goes

Nowhere. Typeback requests no host permissions beyond its content script and makes no network requests of any kind. Your drafts are never uploaded, synced, shared or backed up to any service, including ours.

How long it is kept

Drafts are deleted automatically after the retention period you choose — 1 to 90 days, with 7 days as the default. Older drafts are also removed when total storage exceeds the internal size cap. You can delete everything immediately with Settings → Delete all saved text, and uninstalling Typeback removes all stored data.

Permissions and why they are needed

Permission	Why
Content script on all sites	You can type into a form on any website, so Typeback must be able to capture and restore text on any website. This is its single purpose.
`storage`	Saves your settings.
`contextMenus`	Adds the "Restore saved text here" right-click item.
`alarms`	Runs the scheduled cleanup that deletes expired drafts.

Typeback declares no host permissions, no tabs permission and no network access.

Children

Typeback is a general-purpose utility and is not directed at children.

Changes

If this policy changes, the updated version will be published at this address and the date above will be updated.

Contact

Questions about privacy: open an issue on the project repository.