Privacy
Fillable fills PDF forms entirely inside this browser tab. This page describes exactly what that means for your files.
Everything Runs in Your Browser
Reading your PDF, reading your spreadsheet, matching columns to fields, filling in values, and building the finished file are all done with JavaScript running on your device. None of that work happens on a remote server.
No Server Receives Your Files
There is no upload step and no endpoint that accepts your files. The PDF and the data file you choose are read locally with the browser's own File API, and their contents are never transmitted anywhere.
No Account, No Database
Fillable does not ask you to sign up or log in, and it has no database. Your files, field mappings, and settings exist only in this browser tab and are not saved anywhere else. If you buy the batch-fill unlock, your licence is kept in this browser's local storage and is the only thing saved. That licence is a signed token that includes the email address you paid with, so that address is stored in this browser too. It is never sent anywhere by this site — the licence is checked here, in your browser, with no network request. Clearing your browser storage removes it, and you can restore it from the link in your purchase email.
No Analytics or Tracking; Payment Is the Exception
No analytics or tracking pixels are ever loaded. Payment for the batch-fill unlock is handled by Stripe on Stripe's own pages, opened in a separate tab, and no Stripe code runs on this site. Your PDF and spreadsheet are never sent to Stripe.
Your Original File Is Never Changed
The PDF you open is only read, never modified. Filling it builds a new file in memory from its contents; the file you uploaded stays exactly as it was, and the filled result is offered to you as a separate download in the tab.