FormspillSee who gets what you type into a form
Before you type your email, phone number or card details into a website, Formspill shows you who receives them: the site, ad networks, session recorders.
Formspill is a Chrome extension, coming soon to the Chrome Web Store.
What you see
What the page asks for
Your email, name, phone, card details, with a “Show me” button that points to the form.
Who else runs code on the page
The other companies whose scripts could see what you type.
Who actually received what, and when
After a check: while you typed or when you pressed send, including scrambled (“hashed”) details that ad networks can still link to you, and session recorders that replay your visit.
Plain warnings
A form sent without encryption, a form that puts your details in the web address, a marketing box ticked for you.
How the check works
“Check where my data goes” opens the page in a separate private window, types obviously made-up details into its forms, and watches every request. Anything carrying the made-up details is stopped inside the browser, so nothing is ever submitted. Your real details are never used.
Private by design
Formspill has no server, no account, no analytics and no tracking. Everything happens in your browser, and results are kept only until you close it. Read the privacy policy.
For site owners
Every result links to a technical report with findings and fixes.