PrivacyGuard — Privacy Policy
Last updated: October 23, 2026
🛡️ At a Glance: All detection and redaction runs
locally in your browser. Your typed or pasted text never leaves your
device, and we never see, collect, or store it. The Extension makes one kind of
network request only — to our own license server — and only when you validate a
Pro license key.
1. Introduction
PrivacyGuard ("the Extension", "we", "our") is a Chrome browser extension that detects
and redacts sensitive data (API keys, credit cards, emails, etc.) before you send it to
AI chat tools. This Privacy Policy explains how we handle your information.
2. What We Collect
We do not collect, transmit, or store your prompts or the text you scan.
- Your text content: All sensitive-data detection (regex matching,
Luhn validation) runs entirely in your browser. Your pasted or typed text
never leaves your device.
- Detected matches: Sensitive data matches stay in your browser's
memory and are discarded when you close the tab.
- Your Pro license key (only if you activate Pro): the key you paste
is sent to our own license server so it can check whether the key is valid. No text,
no prompt, and no other data is sent with it.
- No analytics: We do not use Google Analytics, Firebase, or any
third-party analytics service.
- No telemetry: We do not send crash reports, usage statistics, or
diagnostics of any kind.
- No cookies: The Extension does not set or read any cookies.
- No accounts: You do not need to create an account or provide any
personal information to use PrivacyGuard.
3. Local Storage
The Extension uses Chrome's built-in storage API to save your preferences locally:
- Which sensitive-data detection types are enabled/disabled
- Your scan scope preference (AI sites only vs. all websites)
- Daily scan count (to enforce the free tier limit of 5 scans/day)
- Aggregate statistics (total scans performed, total items blocked)
- If you activate Pro: the license key you pasted, plus the license email and expiry
returned by our server, and your Pro activation state
All of this data is stored exclusively on your device. None of it is
transmitted to any server. You can clear it at any time by uninstalling the Extension.
4. Network Requests and Third-Party Services
The Extension's only network request is to
privacyguard-api.bbfydc.cn, our own license server, to validate a Pro
license key you entered.
- No AI APIs are called
- No CDN resources, external fonts, images, or scripts are loaded
- No analytics, telemetry, or diagnostic reporting of any kind
- The Extension has no background worker and loads no remote code — everything it
runs is contained in the package
If you choose to upgrade to Pro, two independent processors are involved in the
purchase itself: Paddle handles the payment, and
Resend delivers your license email from our own domain. They handle
billing and email delivery under their own privacy policies. We never see or store your
full card details.
5. Permissions
PrivacyGuard requests one storage permission plus host permissions for a limited set of pages:
- Storage: Used solely to save your detection preferences, counters
and Pro activation state locally in your browser. No data is synced to any external
server.
- Host permissions for the AI chat sites listed inside the Extension:
required for the core functionality — injecting the content script that watches what
you type or paste. On those pages the Extension reads only the message input you are
typing in, analyses it locally, and never transmits it. The full list of supported
sites is shown inside the Extension.
- Host permission for
privacyguard-api.bbfydc.cn (and its
privacyguard-api.2859955785.workers.dev fallback): used only to
validate a Pro license key you enter.
The Extension does not request <all_urls> access and does not read
pages you are not typing into.
6. Pro License
Pro is available now. The purchase is processed by Paddle, and your license key is
emailed to you by Resend from our own domain (license@bbfydc.cn). The
license key is tied to the email address used at checkout. We store only the license
state needed to validate it: the key, the email address, and the expiry date.
7. Children's Privacy
PrivacyGuard is not intended for use by children under the age of 13. We do not knowingly
collect personal information from anyone, including children.
8. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be reflected
with an updated "Last updated" date, and we will notify users prominently inside the
Extension before a change takes effect.
9. Contact
If you have questions about this Privacy Policy or PrivacyGuard, please contact us at: