Privacy policy

Last updated: 14 October 2026

What the extension does

PromptSafe checks text you paste or type into the prompt box on ChatGPT, Claude, Gemini, and Dola for sensitive patterns (such as card numbers, government IDs, and access keys) before you send it, and lets you redact them.

What stays on your device

All checking happens locally in your browser. The text of your prompts, the values that were detected, and page content are never sent to us or to any third party. Detected values are shown only as masked previews.

What we store

On your device, in browser storage: your settings, and an audit log. Each log entry contains the time, the site, whether the text was pasted or sent, the action you took, and the names and counts of rules triggered (for example "ssn × 1"). It also notes when a file attachment was noticed, without recording the file or its name. It never contains prompt text or detected values.

The extension also keeps a local AI tool inventory: for each supported AI site it has run on, the first and last date seen, the days it was active, and how many prompts were checked. It never records prompt text, and it records nothing for sites where PromptSafe does not run. You can export or clear the audit log and the inventory from the options page at any time.

Team version (when available)

If your organization enables Team features, the extension will also upload the same aggregated entries (time, user, site, rule names, counts, action) and the inventory counts to your organization's dashboard. Prompt content is still never uploaded.

Waitlist

If you join the waitlist the email address, firm size, and practice area you submit are received and stored by our form provider, Formspree, and used only to contact you about PromptSafe. Ask us to delete them at any time.

Permissions

The extension requests only browser storage, and runs on chatgpt.com, chat.openai.com, claude.ai, dola.com, and gemini.google.com. It does not use remote code, analytics, or advertising.

Limits

PromptSafe reduces the risk of accidental disclosure. It is not a guarantee, does not catch every kind of sensitive data, and is not legal or compliance advice.

Who we are

PromptSafe is built and operated by Umbrella Web.

Contact

Questions or deletion requests: support@umbrellaweb.net