Legal

Privacy Policy

Effective 12 August 2026 · applies to the LLM Masker Chrome extension

The short version: what you type never leaves your device. All scanning and masking happens locally in your browser. The only network request the extension can ever make is an optional PRO licence check — and it contains no prompt content.

What LLM Masker does

LLM Masker scans the text of prompts you write on supported AI chat sites (ChatGPT, Claude, Gemini, Copilot, DeepSeek, Perplexity, Google AI Mode) and replaces detected secrets and personal data — API keys and tokens for AI, cloud, developer, payment and messaging services, private keys, connection strings and password assignments, JWT tokens, emails, phone numbers, credit card numbers, IBANs, and national identifiers such as US Social Security numbers, Aadhaar, PAN, UK National Insurance and Canadian SIN — with a safe placeholder before the prompt is sent. Detection runs entirely on your device using pattern matching. There is no account, no sign-up, and no analytics.

Data we do not collect

Prompt content — never transmitted anywhere. Scanning happens locally; there is no network call in the scan path.
Matched values — the secrets the extension detects are never stored, logged, or transmitted. Not even locally.
Browsing activity, analytics, telemetry — none. The extension contains no analytics or tracking code of any kind.
Personal information — there are no user accounts. The only server-side records we keep are PRO subscription records (see below); free-tier use touches no server at all.

What is stored on your device

The extension keeps a small amount of data in Chrome's local extension storage, on your device only:

Your settings — the on/off state, detector choices, and masking-timing preferences.
Masking statistics — a total count and a short recent-activity log holding only the type of each detection (e.g. "Email Address") and a timestamp. Capped at 50 entries and 30 days. The matched value itself is never stored.
A random install identifier — generated locally and kept locally; it is not transmitted.
A PRO licence token, if you purchase PRO.

You can erase the statistics at any time with Settings → Clear activity data, and everything is deleted when you uninstall the extension.

The one network request

If — and only if — a PRO licence is stored, the extension periodically contacts our licence endpoint at llmmasker.com/api to verify that licence. This request carries the licence token and nothing else: no prompt content, no browsing data, no personal information. Without a PRO licence, the extension makes zero network requests. Fonts and all assets are bundled inside the extension, so nothing is fetched from third parties.

PRO purchases

PRO payments are processed by Razorpay; we never see or store your card, UPI or bank details. When you buy PRO, our licence server keeps a minimal subscription record — the Razorpay subscription ID, plan, status, and the email address Razorpay provides with the payment — so your licence can be verified and support requests resolved. That's the entire record; it is never linked to anything the extension does on your device. Razorpay's own processing is governed by Razorpay's privacy policy.

Transactional email. As a PRO buyer you receive a small number of emails about your purchase only: your licence code and PDF invoice after payment, a payment receipt with invoice on each renewal, the same code again if you ask us to resend it, a notice if a renewal payment fails, and a confirmation if you cancel. These are sent from our licence server through Resend (an email delivery provider) to the address Razorpay gave us; the message contains your email address, plan, subscription reference, licence code and (where applicable) an invoice showing the amount paid, and Resend keeps standard delivery logs for a limited period under Resend's privacy policy. We record only when each of these emails was sent. We never send marketing, newsletters or product announcements to PRO buyers without a separate, explicit opt-in — and none of this involves the extension, which still sends nothing but the licence check described above.

This website (llmmasker.com)

The website — not the extension — uses Google Analytics 4 to count visits and see which pages and buttons are used, so we can improve the site. It records the page you visited, coarse device/browser info, and events like "opened the FAQ" or "started checkout (yearly plan)". It never receives anything you type into the extension, and our custom events never include email addresses, licence codes or prompt content. Google Signals and ads personalisation are switched off. If you are in the EEA, UK or Switzerland, analytics cookies are off by default — Google receives only cookieless, aggregate pings and no persistent identifier is stored on your device. Elsewhere, standard analytics cookies are set. Google's handling of this data is described in How Google uses information from sites that use its services. The /activate page is excluded from search indexing.

Permissions we request, and why

storage — save your settings and the local statistics described above.
offscreen — run pattern matching off the page's main thread so chat sites stay responsive.
alarms — schedule the periodic PRO licence re-check.
Site access to the seven supported AI chat surfaces (including Google Search's AI Mode) — required to scan and mask your prompt on those pages. On google.com the extension touches only the AI Mode composer, never ordinary Search.

Data sharing and selling

We do not share, sell, or transfer any user data to anyone. Extension data never reaches us at all; the only processors we use are Razorpay (payments), Resend (purchase emails) and Google Analytics (this website's aggregate visit statistics), each described above.

Children's privacy

LLM Masker is a general-audience developer tool and does not knowingly collect any information from anyone, including children.

Changes to this policy

If we change this policy, the new version will be posted at this address with an updated effective date. Material changes to what the extension does with data will also be noted in the extension's release notes.

Technical details

Security reviewers and IT admins: the full technical write-up — data flow, permissions, storage schema, licensing security, supply chain, and how to verify our claims yourself — lives at Security & technical details.

Contact

Questions about privacy: support@llmmasker.com · contact@asldigitalsolutions.in

LLM Masker is built by ASL Digital Solutions.