Security and privacy, in plain terms

Storage

To keep your settings on your device.

Three sites only

chatgpt.com, claude.ai and gemini.google.com, to check the message before it is sent. Nothing happens on any other site.

Nothing else

No access to your tabs, your history, your downloads or all websites.

Nothing

The extension has no server and makes no network request of its own. Your messages, your files and the values it finds are processed in memory on your device and are never stored or sent. An automated test records every request during a full run and checks this.

Your settings, rules, keywords and templates

As you wrote them, readable by anyone who can open your browser profile.

Your exceptions

Exact values only as a salted one-way hash.

Statistics

Counts only, never any text, for 90 days.

Your best scores and your license key

The key holds an opaque id, a plan and dates. No name, no e-mail address.

Erase all PromptKit data

In the settings. Removing the extension does the same.

Three steps

1. Open chrome://extensions, find PromptKit and look at its site access: three sites.
2. Click "Inspect views: service worker", open the Network tab, then use PromptKit. You will see no request.
3. In that console, chrome.storage.local.get(null) shows what is stored.

Signed keys

The extension only holds the public key, so it can check a key but nobody can make one from the extension. The check is done on your device.

It cannot catch everything

Detection is based on patterns and your own rules.

It does not read images, PDFs or Office files

Files are a beta and only text files are scanned.

It does not cover other apps or APIs

Only messages typed on the three sites.

Write to us

Please write to [à compléter: e-mail de contact]. Please do not send passwords or the content of your messages. Our security.txt gives the same contact.