What Stays on Your Device
- Your profiles (name, email, phone, address, card number, CVV, card expiry, name on card, and an optional photo) are encrypted with AES-256-GCM and stored only in this browser's local storage. They are not synced to your other devices.
- They are locked with your master password (strengthened with PBKDF2-SHA256, 600,000 rounds) or with Touch ID or your device's passkey. The encryption key never leaves your device, and your password is never stored anywhere. Some profile details are sent when OneTap matches form fields, as described below, but never your card number or CVV.
- While OneTap is unlocked, the key is held in browser memory only and is cleared when Chrome closes.
- To make repeat fills instant, OneTap remembers how the forms on recently visited checkout pages are laid out, along with each page's address. This is kept in browser memory only, is never sent anywhere, and is cleared when Chrome closes.
- Removing OneTap from Chrome deletes all of this from your browser.
Your Card Number and CVV
OneTap never sends your card number or CVV to any server, including OneTap's own and the services it uses. When you fill a checkout, OneTap puts them only into the form you chose to fill, on that page, just as if you had typed them yourself.
What OneTap Sends to Match Form Fields
Every checkout page labels its fields differently, so OneTap uses an AI service to work out which field is which. To do that, it sends:
- The structure of the form: field labels, names, IDs, types, autocomplete hints, placeholders, dropdown options, and the heading of the section each field sits in. It only describes fields that are still empty, so it never includes anything you have typed.
- Sometimes, your saved profile details: when you fill a form OneTap has not already mapped since Chrome started, or one that has changed, it sends your name, email, phone, address, card expiry date, and name on card, so the AI can match fields like country and state menus. Your card number and CVV are never included. The service is only told that a card is saved and how many digits it has.
When you open a page with a checkout form, OneTap may send that form's structure ahead of time, with placeholder values instead of your details, so your fill is instant. This can happen even if you never fill the form.
These requests go to OneTap's server, which passes them to Anthropic's Claude API and returns the matches. The address of the page you are on is not sent. OneTap's server does not store the contents of these requests, and Anthropic handles them under its own API data policies.
Your Email Address
OneTap asks for your email on its welcome page when you install it, and may ask again later in the app if you have not given it. We use it to send product updates and let you know when new features ship. It is sent through OneTap's server to our mailing list provider, Resend, where it is stored. It is never stored in the extension or added to your checkout profiles. Apart from the basic technical logs our hosting provider keeps (see Service Providers), this is the only personal information OneTap stores. You can unsubscribe at any time, or email support@getonetap.co and we will delete it.
Anonymous Usage Data
OneTap collects anonymous usage data:
- A random install ID, not linked to your identity.
- A count of each autofill: whether it succeeded, how many fields were filled, and whether AI or pattern-matching was used.
It also records when OneTap is installed or removed, and which version of OneTap you have.
This usage data does not include filled values (names, emails, addresses, cards), the websites you visit, or any personal information.
You can turn usage tracking off in OneTap under Help & tips, “Share anonymous usage data.”
This Website
getonetap.co is hosted by Vercel and uses Vercel Web Analytics to count visits to the site. This is separate from the OneTap extension, which does not use it.
Service Providers
- Railway hosts OneTap's server and the database that stores the anonymous usage data. Like most hosting services, it may keep basic technical logs, such as IP addresses and request times, for security and reliability.
- Anthropic provides the AI that matches form fields. It receives the form structure and, sometimes, the profile details described above.
- Resend stores our email list and sends update emails.
- Vercel hosts this website and counts visits to it.
We share data with these providers only to run OneTap and this website, and with no one else. When you fill a form, your details also go to the site you are checking out on, because that is the form you chose to fill.
What OneTap Does Not Do
- Does not sell your data
- Does not track your browsing history. It never sends the addresses of the pages you visit, and the short-term form layout memory described above is the only place it holds one.
- The extension does not use third-party analytics or tracking tools. The only usage data is the anonymous usage data described above, and you can turn it off.
- Does not show ads
Permissions
OneTap requests only the permissions it needs to work:
storage, to keep your encrypted profiles, your settings, the random install ID, and any usage data waiting to be sent on your device.scripting, to add OneTap to a page that was already open when you installed it.alarms, to send the anonymous usage data in one small batch every 15 minutes instead of one request per fill.- Host access (
<all_urls>), so OneTap can find checkout forms on any site. It looks for forms on your device. When it finds a checkout form it may send that form's structure as described above, and it fills a form only when you pick a profile.
Changes to This Policy
If this policy changes, we'll update the date at the top of this page. Continued use of OneTap after an update means you accept the revised policy.
Contact
Questions about your privacy? Email us at support@getonetap.co.