Privacy Policy

What we collect

Nothing. Redact does not collect, transmit, store, or share any user data. There is no telemetry, no analytics, no error reporting, no remote server, and no third-party SDK.

How the detection works

All detection runs entirely on your own device:

• A small neural network (~34 MB, INT8-quantized) is bundled with the extension and loaded into a Web Worker when you first paste.
• When you paste into a supported chat site, the pasted text is sent to that worker for analysis. The worker runs the model locally in your browser.
• The model produces a list of detected items (credentials, emails, phone numbers, etc.) and returns it to the extension UI.
• The pasted text and detection results never leave your browser.

No HTTP requests are made by the extension. The model and tokenizer are served from the extension's own files (chrome-extension://...), not from any CDN, the Hugging Face Hub, or any external service.

What is stored

The extension uses chrome.storage.sync to persist your settings. That includes your per-entity-type sensitivity preferences and the choice between Quick prompt, Full-screen block, Cooldown, or Auto-redact. These settings sync across your own Chrome installations through Google's storage sync, the same mechanism every Chrome extension uses for preferences. Redact does not have access to your Google account or any data outside its own storage scope.

No pasted text, no detected items, no usage history is ever stored.

Permissions

The extension requests these permissions:

• storage: to save your settings.
• host permissions on the supported chat sites listed above: to inject the content script that intercepts paste events on those pages. No other sites are touched.

Open source

The full source code is available at github.com/Clearform-Labs/Redact. You can verify the above claims by reading the code or building from source.

Contact

Questions about this policy can be sent to [email protected].