Privacy Policy

Last updated: April 1, 2026

🔒 Core Privacy Guarantee

Local PII Scrubber for AI processes all text exclusively on your device. The text you type, paste, or mask is never transmitted to any external server, cloud service, or third-party system operated by us. Zero data leaves your browser.

1. Overview

This Privacy Policy describes how "Local PII Scrubber for AI" (the "Extension"), developed by pandaigo ("we", "us", or "our"), handles your information. We are committed to full transparency: the Extension is designed from the ground up to function without collecting, storing, or transmitting any personal data.

2. Data We Do NOT Collect

The Extension does not collect, transmit, or have access to:

  • The text you type or paste into any web page
  • The content of messages you prepare for AI services
  • Any personally identifiable information (PII) detected or masked by the Extension
  • Browsing history or visited URLs
  • Keystroke data or clipboard contents
  • Device identifiers, IP addresses, or location data

3. How the Extension Works (Locally)

All PII detection and masking logic runs entirely within your browser using JavaScript. When you click "Copy Masked":

  1. The Extension reads the text from the active input field in the current tab only.
  2. Regular expressions and a Luhn algorithm run locally to detect PII patterns.
  3. Masked text is written to your clipboard using the browser Clipboard API.
  4. Usage counts and statistics (total masks, detection types, session counts) are stored locally in chrome.storage.local on your device only.

None of the above steps involve any network request to our servers or any third party.

4. Pro Subscription Verification (Optional)

If you choose to upgrade to a Pro subscription, the following limited data exchange occurs:

  • Email address only: When you click "Verify" in the Extension popup, your email address is sent to our Cloudflare Worker (pii-scrubber-worker.workers.dev) solely to look up your subscription status in our database.
  • Stripe payment processing: Payments are handled entirely by Stripe, Inc. We receive only a checkout.session.completed event containing your email address and subscription expiry date. We do not store credit card numbers or payment details of any kind.
  • Your text content is never transmitted as part of subscription verification — only your email address.

5. Permissions We Request

clipboardWrite

Required to copy the masked text to your clipboard when you click "Copy Masked". We never read from your clipboard.

storage

Stores your usage statistics and trial/subscription status locally on your device via chrome.storage.local. This data never leaves your device.

activeTab + host_permissions: chatgpt.com

Required to inject the "Copy Masked" button into the ChatGPT interface. The Extension only activates on chatgpt.com and only reads the text field content locally.

6. Third-Party Services

The Extension or website may interact with:

We do not use Google Analytics, tracking pixels, or any advertising technology.

7. Data Retention and Deletion

All locally stored data (usage counts, subscription cache) can be deleted at any time by removing the Extension from Chrome (chrome://extensions → Remove), which clears all associated chrome.storage.local data. If you hold a Pro subscription, your email address and subscription record are stored on our Cloudflare Worker KV store. You may request deletion by emailing us at the address below.

8. Children's Privacy

The Extension is not directed at children under the age of 13. We do not knowingly collect any personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated "Last updated" date. Continued use of the Extension after changes constitutes acceptance of the revised policy.

10. Contact Us

For privacy-related questions or data deletion requests, please open an issue on our GitHub repository or contact us via the Chrome Web Store support channel.