Privacy
Last updated 6 October 2026
Scrivoir isn't released yet. This page describes how it is built, and it will be updated before release if anything changes.
Scrivoir is a browser extension that fills forms, logins and sign-ups with details you save in it. This page explains what happens to those details.
Your vault stays yours
Everything you save, such as personal and business details, logins, payment methods, documents, learned forms and fill history, is kept in a vault encrypted with your master password (Argon2id key derivation and AES-256-GCM encryption). The vault is stored on your device, either inside the browser or, if you install the optional helper program, in a folder on your computer. Your master password is never stored or sent anywhere. Without it nobody, including us, can read your vault.
What we receive
Nothing. Scrivoir has no server of ours that receives your details, and no analytics or advertising.
Optional features that send data, only if you switch them on
- AI form understanding. To work out what an unusual box asks for, Scrivoir sends a description of the blank form (box labels, hints and choices) to Anthropic, or to a gateway you run. Before sending, it removes anything that matches your saved details. Your saved values are never sent. If you ask it to draft an answer, it also sends the profile text that answer needs (such as your bio), only for that request.
- Encrypted sync. Your vault items are encrypted on your device before they are sent to a sync gateway. The gateway only ever holds encrypted data and cannot read it.
- Breach alerts. Scrivoir compares the sites of your saved logins with Have I Been Pwned's public list of data breaches, on your device. No site, username or email address is sent. It may download a newer copy of that public list at most once a day, and that request carries nothing about you. Breach data: Have I Been Pwned (CC BY 4.0).
- Email codes. If you connect a mailbox, Scrivoir reads only the newest email from the site you're on, received in the last few minutes, to find a verification code or link. Nothing is kept apart from filling that code.
- Claude connector. If you connect Claude, Claude can ask Scrivoir to fill a form. Scrivoir answers with names and statuses only (for example "Filled 9 of 11 boxes"), never your details. Requests that could be harmful wait for your OK.
Permissions
Scrivoir asks for access to all sites so it can fill forms wherever you are. It reads a page's forms (their labels, not what you type). If learning is on, it also reads a form's values when you submit it yourself, so it can learn from forms you fill. You can switch learning off everywhere or for chosen sites.
Your control
You can view, change, export (encrypted) or delete anything in Scrivoir's settings at any time. Uninstalling Scrivoir removes the vault kept inside the browser. A vault saved by the helper program stays in its folder until you delete it.
This website
scrivoir.com sets no cookies, runs no analytics and loads nothing from other companies. Our web server keeps no record of visits.
Children
Scrivoir is not directed at children under 13.