Privacy

The short version

Tax Forms stores what you type and what you upload, because it has to in order to fill a form and to remember you next year. It is encrypted with a key derived for your account. It is not sold, and it is not used for advertising.

What is collected

• Your account. The email address and display name from the sign-in provider you choose.
• Your answers. Everything you enter on a form — including identifiers such as a Social Security number, if the form asks for one.
• Documents you upload. The file itself, plus the values read out of it and where on the page they were found.
• An audit trail. Which value was filled, from where, by whom, and when. This is what lets you explain a number later. Entries are only ever added — none of them can be edited or removed, by you or by us. Deleting the form removes its whole trail.

The part worth knowing about

Reading an uploaded document means sending that document to a hosted language model. At that moment the contents of your W-2 leave our systems and reach a third party’s. That is unavoidable if you want a document read for you, and we would rather state it plainly than bury it.

If you would rather that did not happen, do not upload documents. Type the values in instead — every part of Tax Forms works the same way, and no model is involved in arithmetic, in the questions you are asked, or in whether you can export.

Your data, and getting rid of it

Deleting a form removes that form and everything under it — every answer, its audit trail, and the filled PDF if you exported one. You can do that yourself from your list of forms at any time.

Facts you have confirmed — your name, address and so on — are kept deliberately, so that next year’s form does not ask you the same questions again. They are the one thing that outlives the forms they came from.

Deleting your whole account removes those facts too, along with your sign-in. You can do that yourself from your list of forms. Nothing is kept afterwards and nothing can be recovered.

Tracking

There is no third-party analytics, no advertising network and no cross-site tracking. The only things stored in your browser are your theme choice and which tab you last had open.