Privacy Policy
YOUR PII STAYS WITH YOU. VeilPrompt runs in your browser. It does not send your messages, personal data, stand-in tables, or conversation logs to any server, because VeilPrompt has no server.
What VeilPrompt does
VeilPrompt is a browser extension for ChatGPT. Before a message you type is sent, it finds personal data such as names, email addresses, phone numbers, card numbers, bank account numbers, national ID numbers, API keys, and addresses. It replaces each value with a realistic stand-in. When the reply comes back, it shows your real values again on your screen. You can turn VeilPrompt off for a single chat, in which case that chat is sent as you typed it.
Where your data is processed
All detection and replacement happen on your device. Pattern checks run in the extension. Names, addresses, and cities are found by a small language model that also runs on your device.
What the extension stores, and where
- Settings (which kinds of data to hide, your allow list, whether to anonymize automatically, whether VeilPrompt is on, and whether the model is on) are stored in your browser's local extension storage.
- The real-to-stand-in table for each chat is stored in your browser's session storage. It holds your real values.
- The conversation log for each chat is also stored in session storage. It holds what you typed, including your real values, the text that was sent with stand-ins, and each model reply as it was produced and as it was shown to you. The log keeps every message in the chat for the length of the browser session.
- Session storage is cleared when the browser closes, when the extension is reloaded, disabled, or removed. Nothing is uploaded, and VeilPrompt keeps no copy outside your browser.
Your real values are in your browser's session storage while it is open. Anyone with access to your browser profile while the session is running could read them. Use a profile you control, and turn VeilPrompt off for a chat if you do not want its values stored.
Network requests
VeilPrompt makes one kind of network request. When you press Download model on the setup page, it downloads a one-time detection model of about 58 MB from Hugging Face (huggingface.co). The download starts only when you press that button. After that the model is cached in your browser, and no further download is needed. VeilPrompt has no other connection to any server, and it does not send your text anywhere.
ChatGPT
VeilPrompt does not change what ChatGPT does with a message once it is sent. The message ChatGPT receives contains the stand-ins, not your real values, for everything VeilPrompt detected. Anything VeilPrompt did not detect is sent unchanged. Your use of ChatGPT is governed by OpenAI's own terms and privacy policy, and VeilPrompt has no control over how OpenAI stores or uses the text it receives.
What we do not do
- We do not collect analytics, telemetry, or usage data.
- We do not have accounts or sign-in.
- We do not sell, share, or transfer any data, because we do not receive any.
- We do not read your chats outside the ChatGPT pages where VeilPrompt is active.
Replies, history, and what you can recover
While VeilPrompt is installed and the browser session lasts, you see replies with your real values put back, and the conversation log shows what was sent and received. When the session ends, or you reload, disable, or remove the extension, the table and the log are gone. The original values cannot be recovered from the chat, because VeilPrompt does not store them anywhere else. Chats you open later may show only the stand-ins that ChatGPT stored.
Permissions
- storage: saves your settings, the per-chat tables, and the conversation logs described above.
- offscreen: runs the local detection model in a hidden browser page.
- Site access (chatgpt.com and chat.openai.com): reads and changes the message box and reply text on those pages, so personal data can be replaced before sending and restored in replies.
Children
VeilPrompt is not directed at children under 13, and it does not knowingly collect information from anyone.
Changes to this policy
If this policy changes, the new version will be posted on this page with a new date.
Contact
Questions or concerns: open an issue at github.com/keshavsbhandari/veilprompt-site/issues.