Maskr Privacy Policy
In short: Maskr checks what you're about to send to AI chatbots, and it does this entirely on your own device. Nothing you type, and nothing Maskr finds, is ever sent to us or to anyone else. There are no servers, accounts, analytics, ads or tracking.
What Maskr does
Maskr is a browser extension that warns you, or stops a prompt, before you send personal data or secrets (for example an Aadhaar or PAN number, a bank account, a card number, an API key or a password) to an AI chat website. It can also replace just those details with placeholders such as [AADHAAR] and send the rest.
The information Maskr handles
To do its one job, Maskr reads the text you submit on supported AI chat websites (ChatGPT, Claude, Gemini and Copilot) and on any other chat site you choose to add. That text may contain personal, financial, health or login information. It is examined on your device, by pattern matching and by an AI model that is bundled inside the extension, at the moment you press send.
This text is not transmitted anywhere, stored on any server, shared with anyone, or used for any purpose other than checking it before you send it.
What is stored, and where
Maskr stores the following only in your browser's own extension storage (chrome.storage.local) on your device:
| Item | What it contains |
|---|---|
| Alert history | For each warning or block: the time, the website, the kinds of data found (e.g. "Aadhaar number"), the rule that applied, and what happened (not sent, sent anyway, masked). It never contains the detected values themselves. Up to the 2,000 most recent entries are kept. |
| Masked snippet (optional) | Up to 200 characters of a flagged prompt with every detected value blacked out, so you can recognise it later. You can turn this off in Dashboard → Settings. |
| Your settings | Your rules, the extra sites you added, any pauses, the on/off switch, and the Scanned / Blocked / Warned counters. |
None of this leaves your device. We cannot see it.
What Maskr does not do
- It does not send your prompts, detections or history to any server, including ours. Maskr has no server.
- It does not use analytics, crash reporting, advertising or tracking of any kind.
- It does not sell, rent, share or transfer any data to third parties.
- It does not use data for any purpose unrelated to checking prompts, or to determine creditworthiness or for lending.
- It does not require an account or sign-in.
Permissions, in plain words
- Access to the supported AI chat sites: to check a prompt when you press send on those sites.
- Access to other sites (optional): only for a chat site you add yourself in the dashboard. Chrome asks you each time, one site at a time.
- Storage: to keep your settings and alert history on your device.
- Offscreen document: to run the bundled AI model in the background, locally.
- Scripting: to start checking on the extra sites you add.
- Active tab: so the toolbar popup can show whether the current site is being checked.
Your control over your data
- Clear alert history: Dashboard → Alerts → Clear history.
- Delete your alert history, rules and counters: Dashboard → Settings → Erase. Remove sites you added in Dashboard → Sites.
- Uninstalling Maskr removes all of its stored data from your browser.
- You can pause Maskr on any site, or switch it off, from the toolbar popup.
Children
Maskr is not directed at children and collects no information from anyone.
Changes to this policy
If Maskr's handling of information ever changes, this page will be updated and the effective date above will change. Any change that would send data off your device would be stated here clearly before it takes effect.
Contact
Questions about this policy: gwebstoredeveloper@gmail.com