Extension Privacy Policy

1. Single purpose

The extension has one purpose: to let you anonymize the text you are about to send to a web-based AI assistant, and to restore the original values in the answer you get back. It does nothing else.

2. What the extension reads

• The text you explicitly submit. Only the contents of the prompt field, and only at the moment you click Anonymize or Restore. The extension does not read the page continuously, does not scrape conversation history, and does not read any other tab.
• Your settings. API endpoint, language, anonymization mode, context type, and the auto-send / intercept toggles.
• Your credentials. Either an API key or an OAuth 2.0 access and refresh token pair.

It reads nothing on any site other than chatgpt.com, claude.ai and gemini.google.com.

3. Where the text goes

When you click Anonymize, the selected text is sent over HTTPS to the Pseudora Cloud API (or to the self-hosted Pseudora instance you configured yourself) so that the detection engine can find and replace the personal data in it. The anonymized result is written back into the prompt field.

This is the whole point of the product: the text must reach our engine so that it does not reach the AI provider in the clear. We do not transmit it anywhere else.

4. What is stored, and where

• In your browser, never transmitted to us except as described above. Your credentials — an API key, or OAuth access and refresh tokens — are held in chrome.storage.local, which stays on that machine and is never uploaded to your browser account. Your preferences (endpoint, language, mode, context type) are held in chrome.storage.sync, so they follow you between devices through your browser vendor in the ordinary way; they contain no personal data and no credentials. The identifier of your current anonymization session and of your last operation are kept locally too, the latter so the thumbs-up / thumbs-down control can attach feedback to it.
• On our servers: the reversible mapping between placeholders and original values, so that Restore can work. Mappings are encrypted at rest, scoped to your tenant, and deleted according to the retention TTL configured for your account. Usage counters and audit records store request metadata and digests — never the original text.

If you use the extension in surrogate mode without restore, no reversible mapping is retained.

5. What we never do

• We do not sell or rent your data to anyone.
• We do not transfer your data to third parties except the infrastructure sub-processors listed in our main privacy policy.
• We do not use your data for advertising, profiling, creditworthiness or lending decisions.
• We do not use your prompt text to train models — ours or anyone else's.
• The extension contains no analytics, no trackers, no advertising SDKs, and loads no remote code. All of its JavaScript ships inside the package.

6. Self-hosted deployments

If you point the extension at your own Pseudora instance, your text goes to your server and never touches our infrastructure. In that case you are the controller of that data and this policy applies only to the extension code itself.

7. Your rights and how to erase everything

Under GDPR you may access, rectify, erase, restrict and port your data. To erase everything the extension holds locally, remove it from your browser or use Log out in the popup. To erase server-side data, delete your account from the dashboard or write to [email protected]. We respond within 30 days.

8. Contact

Data controller: PII Protect S.r.l., Italy — [email protected]

See also: permission justifications · data usage disclosure · platform privacy policy