Privapanda Guard privacy policy

Last updated 30 October 2026

What Guard reads

Guard runs only on chatgpt.com, claude.ai, gemini.google.com, grok.com, muse.ai and chat.deepseek.com. On those sites it reads the text you paste into the prompt box, and the text in the prompt box when you send it, so it can look for sensitive items: email addresses, phone numbers, card numbers, ID numbers, and API keys or passwords. That check happens inside your browser. Guard does not read anything else on those pages, and it does not run on any other website.

What Guard keeps, and where

Each time a prompt is sent, Guard adds an entry to a ledger stored in your browser profile on your device (in the extension's own storage, which the chatbot websites cannot read). An entry holds:

• the date and time, and which of those sites it was;
• the prompt text exactly as it was sent, including placeholders such as [EMAIL_1];
• which placeholders it contained and what kind of item each one replaced (for example "card number");
• the kinds of flagged items you chose to send unchanged.

The original values behind placeholders are never written down. Guard remembers them only in the open tab's memory, so it can undo a redaction, and forgets them when the tab is closed.

Entries are chained together and signed with a key created in your browser, so changes to the ledger can be detected. The key never leaves your device.

What Guard sends

Nothing. Guard contains no code that talks to the internet, has no analytics or tracking, and its own pages are set to block network requests. We, Privapanda, never receive your prompts, your ledger or anything about how you use Guard.

The prompts you choose to send still go to the chatbot you are using, exactly as they would without Guard. What that company does with them is covered by its own privacy policy.

Sharing and selling

We don't have your data, so we don't share or sell it. Guard does not use your data for anything other than showing you what you are about to send and keeping your ledger.

Keeping and deleting

The ledger stays in your browser until you remove Guard. Removing the extension from Chrome deletes its storage, including the ledger and its signing key.

Children

Guard is not directed at children under 13.

Changes

If this policy changes, the new version will be posted on this page with a new date.

Contact

Questions: [email protected]