PrAIvacy ← Back to site

Privacy Policy

Last updated: September 29, 2026

The short version PrAIvacy runs entirely on your device. It reads what you type only to find sensitive data and help you redact it, and it never sends that text to a server, ours or anyone else's. There is no account to create, and no tracking, analytics, or telemetry of any kind. The sections below explain exactly how it works.

What PrAIvacy does

PrAIvacy is a Chrome extension with a single purpose: to detect sensitive information in the text you type into supported AI chat sites, and let you redact it in one click before you send. It recognizes things like names, email addresses, phone numbers, postal addresses, links, dates, account identifiers, and secret keys. Detection and redaction is the whole of what it does; it has no other function.

Where your text is processed

All detection happens locally, on your device, inside your browser, using an on-device AI model. As you type into a supported site, PrAIvacy reads your draft only to locate sensitive spans and highlight them, and it redacts them on your device, before anything is sent. That text is never transmitted to us, and never to any third party. What you ultimately choose to send to an AI service is transmitted by that service and governed by its privacy policy, not this one.

What leaves your device

PrAIvacy's only outbound network activity is to Hugging Face, which hosts the AI model, and only if you choose to turn on detection. Before the first download it makes a small request to confirm the model is reachable, and then it downloads the model's files (its weights). The model is downloaded once, and again only when an extension update ships a newer version, which is fetched quietly in the background and swapped in. Every one of these requests brings data to your device; none of them carries the text you type. Once the model is in place, detection runs fully offline. The extension's content security policy limits its connections to its own bundled resources and to Hugging Face (huggingface.co, *.huggingface.co, and *.hf.co), and nothing else. Like any download, these requests show Hugging Face your IP address and ordinary request details, which it handles under its own privacy policy; they never include anything you type.

What's stored on your device

Your preferences are saved locally through the browser's chrome.storage, and they stay there: whether protection is on, your sensitivity and per-category settings, your redaction style, any sites you have muted, whether you have seen the one-time tip about restoring redacted values, and a record of which model has been downloaded. If you add words or phrases to Flagged values (so they are always flagged), they are stored as you typed them, because PrAIvacy has to recognize them in future prompts; you can remove them in Settings at any time. If you mark a value as "never flag this," PrAIvacy stores a hash of it rather than the value itself. A hash is not encryption: someone with access to your browser profile could work out a short or guessable value from it. It also keeps a simple daily count of how many items it detected and redacted, which you can see in the popup, and counts your first few redactions (it stops at three) so that it can ask you, once, whether you would like to rate it. None of this is ever sent to us.

When you redact something, PrAIvacy remembers which placeholder replaced which original value, so that copying the AI's reply can put your originals back. This list is kept in the browser's in-memory session storage, which only the extension itself can read (not the website), and it is deleted when you close the tab or the browser.

Data PrAIvacy handles, and data we collect

To do its job, PrAIvacy handles the following data on your device only: the text of your draft in a supported site's prompt box (website content), and whatever sensitive values that draft contains, such as names, email addresses, phone numbers, and postal addresses (personally identifiable information), card and account numbers (financial information), and passwords or secret keys (authentication information). It uses this data for one thing only: detecting those values and redacting them at your request, as described above. The Chrome Web Store asks extensions to disclose data they handle even when it never leaves the device, which is why the store listing names these categories.

We, the developer, collect none of it. Because PrAIvacy transmits nothing you type, there is no user data for us to receive or store on a server, and we operate no servers that could. We use no analytics, no tracking, no advertising identifiers, and no telemetry. We do not sell or transfer user data to anyone, do not use it for any purpose unrelated to PrAIvacy's single purpose, do not use it for advertising, do not use it to determine creditworthiness or for lending, and no person reads it.

PrAIvacy's use of user data complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.

This website and email

This website (praivacy.info) sets no cookies and runs no analytics. It is hosted on Cloudflare, which processes visitors' IP addresses and standard request details to deliver the pages and protect them from abuse, under Cloudflare's privacy policy. If you email us, we receive your email address and whatever you write, and use them only to reply to you. We delete that correspondence when it is no longer needed, and you can ask us to delete it at any time.

Your rights

Everything PrAIvacy stores lives in your own browser, so you control it directly: remove entries in Settings, or uninstall the extension to delete all of it. For anything we hold about you (only emails you sent us), you can ask us to access, correct, or delete it by writing to privacy@praivacy.info, and you have the right to complain to your local data protection authority.

Privacy laws

PrAIvacy is designed so that almost none of these laws has anything to act on: the extension collects no personal data, and the only personal data we hold is email you send us. Here is how each applies. This is a plain description of our design, not legal advice or a certification.

PrAIvacy can help you keep personal data out of AI prompts, which is often what your own obligations under these laws, HIPAA, or your employer's AI policy require. It does not make you compliant by itself, and detection can miss things.

Third parties

No third party receives your content through PrAIvacy. Hugging Face provides the model file to you; it does not receive anything you write. We share no data with anyone. PrAIvacy is not directed at children.

Permissions

PrAIvacy requests only the permissions its single purpose requires:

No guarantees

PrAIvacy is free and provided as is. Detection is best-effort: an AI model will not catch every piece of sensitive data, and it may occasionally flag something that turns out to be fine. Treat it as a helpful assistant rather than a guarantee, and use your own judgment about what you share with any AI service. You use PrAIvacy at your own risk.

Changes to this policy

If anything described here changes, we will update this page and the date at the top, and flag any significant change inside the extension itself.

Contact

If you have any questions about this policy or your privacy, email privacy@praivacy.info. For help using PrAIvacy, email hello@praivacy.info.