Privacy Policy
Last updated: 15 August 2026
Your messages are anonymised on your own computer. The text you write, the documents you load, and the link between placeholders and your real details are never transmitted to us or to anyone else.
How your messages are handled
The extension holds your message before it reaches ChatGPT or Claude, detects sensitive details using an AI model running locally on your machine, and lets you review exactly what will be sent. Only the anonymised version is sent to the AI provider. The reply is restored to your real details on your device.
- Your original text never leaves your device.
- The detection model runs offline on your machine — no text is ever sent anywhere to be analysed. The model itself is downloaded once, the first time the app runs (see below).
- Placeholder mappings live in your browser's session storage and are cleared when the tab closes.
- Saved rules and preferences stay in your browser's local storage.
When the app does contact a server
The app is offline by default. It reaches the network only in these moments — never to send your content:
| When | What is sent | Where |
|---|---|---|
| First run — downloading the detection model | Nothing about you: a plain download request for the model file (about 1.6 GB, fetched once and then reused offline) | github.com |
| Activating a licence | Your licence key and an anonymous machine identifier (a one-way hash of your computer's name, user name, operating system and processor type) | localredactor.xyz |
| Renewing a subscription | The same two values, re-sent shortly before the licence expires so it can be extended | localredactor.xyz |
No message content, document text, detected values or placeholder mappings are included in any of these requests. Aside from them, the app makes no outbound calls at all. The desktop app also checks for updates.
Licences and payment
Payments are handled entirely by Stripe. We never see or store your card details. Your subscription record lives with Stripe; we keep no customer database of our own.
Your licence key contains an 8-character one-way hash of your email address — not the address itself — along with the type of licence and its order reference. The licence stored on your computer additionally names the machine it was activated on, so a key cannot be used on unlimited computers.
Diagnostics
There is no automatic error reporting. If you ask for help, the extension can assemble a diagnostic report describing software versions, whether the engine is running, and how many rules you have saved. It contains none of your messages, rules or personal data, and it is never transmitted automatically — it is placed on your clipboard or into an email draft, and only you decide whether to send it.
What we never do
- No analytics, telemetry or usage tracking
- No cookies
- No accounts or sign-ups
- No transmission of your messages, documents or detected values
- No selling or sharing of data with third parties
Changes to this policy
If this policy changes, the updated version will be posted at this address with a new date.
Contact
Questions about privacy, or about your data? Email localredactor@gmail.com.