Privacy Policy

Form4868.org is operated by 360 DEV LLC. In this policy, "we," "us" and "our" mean 360 DEV LLC.

Your Social Security number

Form4868.org never transmits, stores or logs your Social Security number or ITIN, or your spouse's.

The numbers you type are held in the page's memory only, inside the code that fills your PDF.
They are never written to your browser's session storage, local storage or cookies, so they don't survive a refresh. That's on purpose.
They're never put in a web address, a server request, a log or an analytics event.
After you type a number, the page shows only its last four digits unless you choose Show.
When you download the filled form, the page erases them. Closing the tab erases them too.

The filled PDF you download does contain your numbers, because the IRS form needs them. That file lives only on your device. Keep it somewhere safe, and delete it from shared computers.

The rest of your Form 4868 stays on your device

Everything else you enter (names, address, tax year and amounts) is handled by code running in your own browser. The filled PDF is made on your device. None of it is sent to us, to our host, or to analytics.

While you work: those answers (never the Social Security numbers) are saved in your browser's session storage for that tab, so a refresh doesn't wipe them. They're dropped after 2 hours, and Clear my answers deletes them at any time.
When you download: your answers are deleted. A small note stays in that tab for the mailing page: which return you file, where you live (a state, a territory or "foreign"), whether you're sending a payment, and your due dates. It has no name, address, Social Security number or dollar amount, and it's gone when you close the tab.
Never: in a URL, a cookie, a server log or an analytics event.

What we do collect

Contact form: your name, email and message, so we can reply. Please don't put your Social Security number or tax figures in a message.
Deadline reminders: your email address, if you sign up. We use it to send one reminder before next year's April deadline.
Analytics: if you accept analytics cookies, how you use the site (see below).
Server logs: our host, Netlify, keeps standard request logs (such as IP address, browser and pages requested) to run and secure the site. Nothing you type into the form is in them.

What we don't do

We don't sell or share your personal information. We don't use it for targeted advertising. We don't collect bank details or payment cards.

Companies that help us run the site

Netlify hosts the site and stores contact messages and reminder signups (Netlify Forms). Contact messages are also forwarded to our email inbox so we can reply.
Google provides Google Tag Manager and Google Analytics.
An email service may be used to send the yearly reminder. It gets only your email address.

Our fonts and images are stored on our own site, so loading a page doesn't send your visit to a font or image service.

Cookies, analytics and your choices

Google Tag Manager loads on every page. Google Analytics measures your visit only after you choose Accept analytics in the cookie banner. Until then, Google's analytics and advertising storage stay off (Google Consent Mode, set to denied by default).

If you accept, Google Analytics sets its cookies (named _ga and _ga_ followed by an ID) to count visits and see which pages help. Advertising storage stays off either way. We don't use remarketing or ad personalization on this site.

Change your mind any time with Cookie settings at the bottom of every page. You can also block cookies in your browser or use the Google Analytics opt-out add-on. To learn how Google uses this data, see How Google uses information from sites that use its services and the Google Privacy Policy.

What we store in your browser:

Name	Where	What it's for	How long
`f48consent`	Local storage	Remembers your cookie choice	Until you clear it
`f48state`	Session storage	Your form answers while you work. Never your Social Security numbers.	Deleted on download, after 2 hours, or when you close the tab
`f48mail`	Session storage	Return type, where you live, payment yes or no, and due dates, for the mailing page	Until you close the tab
`_ga`, `_ga_*`	Cookies	Google Analytics, only if you accept	Up to 2 years

When you click through to e-file

The e-file links open TaxExtension.com, our partner, in a new tab. The link tells them which of our pages sent you (for example, utm_content=fork). It never carries your name, Social Security number, answers or anything else from the form. Once you're on TaxExtension.com, its privacy policy applies.

How long we keep things

Social Security numbers: never kept. See above.
Reminder signups: until you unsubscribe or ask us to delete your email.
Contact messages: as long as we need them to reply. Ask us any time to delete yours.
Analytics data: kept by Google under its Google Analytics data retention settings.

Your privacy rights

Some state privacy laws, including those of California, Colorado, Connecticut, Texas and Virginia, give you the right to opt out of the sale or sharing of personal information and of targeted advertising. We don't sell or share personal information or use it for targeted advertising, so there's nothing to opt out of. A Global Privacy Control signal is honored by default for the same reason.

You can ask to see, correct or delete what we hold about you (contact messages and reminder signups) with the contact form. We reply within 45 days.

Do Not Track. There's no common standard for it, so the site works the same either way. Analytics runs only if you accept it.

Children. The site is for adults filing their own tax returns. It isn't directed to children under 13, and we don't knowingly collect their information.

Outside the United States. Form4868.org is for people who file U.S. individual tax returns, including those living abroad. Analytics stays off unless you accept it, wherever you are.

Changes

We'll update this page if anything changes, and the date at the top will show when.