Last updated: July 28, 2026

Backstop stores recoverable drafts on the user's device. It does not transmit, sell, share, or remotely process any user data.


Backstop may store:

• text typed into eligible multiline text areas or editable rich-text regions;
• a privacy-minimized fingerprint used to match the same page and field;
• the page origin and path, without query parameters or fragments;
• a short field label, draft timestamps, and recovery totals;
• settings such as paused sites and retention length.

Draft lookup still distinguishes the full route, including query parameters and fragments, through a one-way local hash. Raw query parameters and fragments are not stored.


Backstop does not capture:

• ordinary single-line inputs;
• password, payment, card, one-time-code, authentication, private-key, seed-phrase, or similarly labelled fields;
• read-only or disabled editors;
• pages in Firefox private browsing;
• protected Firefox pages, the Firefox PDF viewer, Reader View, or addons.mozilla.org.

Detection is deliberately conservative, but no automatic classifier is perfect. Users should not type secrets into fields they expect Backstop to protect.


Drafts expire after seven days by default. The retention period can be shortened or extended in Backstop settings. Users can pause Backstop on a site, which also deletes that site's saved drafts, or clear every draft immediately.

Firefox extension storage is local but is not encrypted. Anyone with sufficient access to the Firefox profile may be able to inspect it. Removing Backstop also removes its extension storage.


Backstop performs no background network requests and includes no analytics, telemetry, advertising, remote code, or cloud synchronization. The only external link is the user-initiated support link:

https://buymeacoffee.com/endoftheend


Questions can be sent to the support email support@eriksenlabs.com