Privacy
Fillable fills PDF forms entirely inside this browser tab. This page describes exactly what that means for your files.
Everything Runs in Your Browser
Reading your PDF, reading your spreadsheet, matching columns to fields, filling in values, and building the finished file are all done with JavaScript running on your device. None of that work happens on a remote server.
No Server Receives Your Files
There is no upload step and no endpoint that accepts your files. The PDF and the data file you choose are read locally with the browser's own File API, and their contents are never transmitted anywhere.
No Account, No Database
Fillable does not ask you to sign up or log in, and it has no database. Your files, field mappings, and settings exist only in this browser tab and are not saved anywhere else. The batch-fill unlock token (a Stripe Checkout Session ID) is kept in this browser's local storage and is the only thing saved.
No Analytics or Tracking; Payment Is the Exception
No analytics or tracking pixels are ever loaded. Payment for the batch-fill unlock is handled by Stripe on Stripe's own pages, opened in a separate tab, and no Stripe code runs on this site. Your PDF and spreadsheet are never sent to Stripe.
Your Original File Is Never Changed
The PDF you open is only read, never modified. Filling it builds a new file in memory from its contents; the file you uploaded stays exactly as it was, and the filled result is offered to you as a separate download in the tab.