ShadowAI Guard Privacy Policy

Effective 5 November 2026. This policy covers versions 0.1.0 through 0.1.4 and version 0.2.0 of the ShadowAI Guard browser extension. It does not describe any future web app or team service.

What the extension accesses

On the supported AI chat websites, ShadowAI Guard reads the text in a prompt when you try to send it. The prompt may contain personal information, payment or bank details, authentication secrets, or other text you entered. The extension checks that text for known patterns and displays masked matches and a risk score.

In versions 0.1.2 through 0.1.4, clicking Restore values examines visible AI replies for known placeholders, starting with the most recent, or reads the reply text you selected. Versions 0.1.3 and 0.1.4 also let you paste copied AI reply text into the Restore panel for a different reply or when a reply cannot be found automatically. Version 0.1.1 reads only the text you selected for restoration. Versions 0.1.1 through 0.1.4 show a restored copy in the extension's panel and do not rewrite the website's messages. In version 0.1.0, Restore values scans page text nodes and replaces placeholders inline, including in sent prompts. None of these versions reads your browser history, contacts, or files.

Version 0.2.0 has the same Restore panel behavior as version 0.1.4. It also lets you create custom keyword and simple-regex rules. The extension reads each rule's name, terms or pattern, enabled state, and warning or block action when it checks a prompt. A sample entered in the rule editor is scanned on your device and is not saved.

How the data is used and stored

Scanning and redaction run in your browser. When you choose Redact, the extension replaces detected values in the prompt with placeholders. The placeholder-to-original mapping is kept in the extension's memory for the current tab so it can restore values when you request it. Pasted reply text is used only while the Restore panel is open. The mapping and pasted text are not saved to browser storage and are discarded when the page fully reloads or the tab closes. Versions 0.1.1 through 0.1.4 also clear the mapping on the next extension action after you move to a different chat URL.

In version 0.2.0, custom rule definitions are saved in Chrome's local extension storage on your device until you edit or remove them or uninstall the extension. They are not synced to your Google account by this extension. Rule definitions may contain information you consider sensitive, so only enter terms you want stored locally. Prompt text, matched values, sample text, and restore mappings are not saved to extension storage. Version 0.2.0 clears restore mappings on the next extension action after you move to a different chat URL.

The current extension has no account, analytics, advertising, or extension-initiated network requests. It does not send prompt text, detected values, custom rules, or usage events to the developer or another service.

What the AI website can receive

The AI website operates independently of ShadowAI Guard and may process a draft before you press Send. If you choose Send anyway, the website can receive the original prompt. If you redact and then send, the website receives the edited prompt, including any text the extension did not detect. In version 0.2.0, a blocking custom rule removes the Send anyway option for that match, but you can redact and then send. In version 0.1.0, Restore values writes original values into the website's page, where its scripts may access them. In versions 0.1.1 through 0.1.4 and version 0.2.0, viewing a restored copy in the extension panel does not edit the website's messages. If you copy or paste restored text into the website, its scripts may access that text. Consult that website's privacy policy for its practices.

Your choices

You can cancel the warning, redact detected values, or send the prompt anyway when that option is available. In version 0.2.0, you can edit, disable, or remove custom rules in extension settings. Reloading the page or closing the tab clears the extension's in-memory restore mapping. In versions 0.1.1 through 0.1.4 and version 0.2.0, moving to a different chat URL clears it when you next use the extension. Uninstalling the extension stops future scanning and removes saved local rules. These actions do not delete data already received by an AI website.

Limited use

ShadowAI Guard uses browser-accessible data only to scan and redact prompts and restore placeholders as described here. It does not sell data, use it for advertising, or permit the developer to read your prompts. Its use of information received from browser APIs follows the Chrome Web Store User Data Policy, including the Limited Use requirements.

Changes and contact

If the extension's data practices change, this policy will be updated before the changed version is released, with additional notice where required. For privacy questions, contact islam.safikul2501@gmail.com.