Privacy policy
Sovereign Shield — LLM PII guard (browser extension). Last updated 18 July 2026.
The short version
The extension does its work entirely inside your browser. It collects no personal data, sends nothing to us or any third party, and has no server, account, API key or analytics. There is nothing for us to see, because nothing ever leaves your device.
What the extension does
On gemini.google.com, chatgpt.com, chat.openai.com and claude.ai, it inspects the request the page is about to send to its model, replaces any checksum-validated Swiss, EU or international identifier with a placeholder before the request leaves your browser, and restores the real value in the reply you read. This all happens locally, in the page.
Before you send, a small counter above the chat box previews how many identifiers will be kept local. It reads your prompt text entirely within transient page memory — it never touches the network, is never written to disk, and is gone the moment the tab closes.
Data handling
- Identifier values are never stored or transmitted. The map linking a value to its placeholder lives only in the page's memory for the life of the tab and is discarded when the tab closes or reloads.
- Local settings. Your on/off toggle and per-category choices are saved in the browser's own extension storage (
chrome.storage.local) on your device only. - Activity log. An on-device log records, for each redaction, the identifier type, the time, and the site — and never the value, not even a masked one. It is a rolling window you can erase at any time from the options page, and it never leaves your device.
- No collection, no transmission, no tracking. No data is sent to the developer or anyone else. There are no cookies, no analytics, no remote code.
Permissions, and why
- Host access to the four chat sites above — required to read and rewrite the outgoing request so identifiers can be redacted before they are sent, and to restore them in the displayed reply. The extension runs on those sites only.
- Storage — to remember your settings and the value-free activity log on your device.
Your control
Clear the activity log any time from the options page. Removing the extension deletes all of its local data. You can also disable the guard, or any individual category, from the popup or options page.
Scope
The extension detects structured, checksum-validated identifiers only. It does not attempt to detect names or addresses. It is an independent open-source project and is not affiliated with Google, OpenAI or Anthropic.
Contact
Questions or issues are welcome on GitHub: github.com/acoseac/sovereign-shield