Chrome Extension: In-Page AI Redactor
The Browser AI Shield: Native Redaction for ChatGPT & Claude
AI Summary / Key Takeaways
"Protect your team's AI inputs exactly where they work. Our Chrome Extension injects Zero-Trust PII scrubbing directly into ChatGPT, Claude, and Gemini, masking sensitive data before the Enter key is ever processed."
Enterprise-Grade AI Privacy
Add custom redaction rules and priority support with PRO.
Why Legacy DLP Fails AI Workflows
Employees circumvent centralized AI portals by using ChatGPT directly in their browser. Training them to copy-paste through a separate scrubbing tool leads to friction and inevitable compliance failures when they forget.
How to Mask PII in Local Memory
Install Extension
Add the extension to Chrome. It natively integrates with 12 popular AI chat platforms (ChatGPT, Claude, Gemini, Copilot, etc.).
Live Interception
Automatically injects a security shield button directly into chat inputs. Monitors input fields to sanitize prompts in-place before submission.
Local Reveal
Restores original values directly inside the chat interface using a volatile, tab-isolated browser-session memory map.
What Teams Achieve with Local PII Masking
Swipe to read more
Supported Formats & Limitations
Supported Formats
System Limitations
- Requires Chromium-based browser (Chrome, Edge, Brave, Arc)
- Scrubbing highly complex rich-text editors (like Google Docs) may strip specific formatting tags
- Cannot intercept requests made outside the browser environment
Chrome Extension v1.6.4: Technical Architecture
The PrivacyScrubber Chrome extension brings the same zero-trust detection engine directly to 12 AI platforms. It uses Google Manifest V3 architecture — a content script model where all processing happens inside the browser tab's renderer process, with zero background server communication for PII data.
Supported AI Platforms
| Platform | URL | Injection Mode |
|---|---|---|
| ChatGPT | chat.openai.com | In-Page Shield + Floating Toolbar + Auto-Scrub |
| Claude | claude.ai | In-Page Shield + Floating Toolbar + Auto-Scrub |
| Gemini | gemini.google.com | In-Page Shield + Floating Toolbar + Auto-Scrub |
| Microsoft Copilot | copilot.microsoft.com | In-Page Shield + Floating Toolbar + Auto-Scrub |
| Grok, DeepSeek, Perplexity | x.ai, deepseek.com, perplexity.ai | In-Page Shield + Floating Toolbar + Auto-Scrub |
| Qwen, Kimi | aliyun.com, moonshot.cn | In-Page Shield + Floating Toolbar + Auto-Scrub |
| Zendesk, Notion, Slack | zendesk.com, notion.so, slack.com | In-Page Shield + Floating Toolbar + Auto-Scrub |
Interactive Feature & Workflow Guide
Explore the different ways the Chrome Extension secures your prompt pipeline. Click the tabs below to view detailed workflows and usage mockups.
Zero-Friction In-Page Sanitization
The extension automatically identifies prompt entry fields in your browser window and embeds a Privacy Shield badge directly beside them.
- Real-time Input Glow: Typing sensitive PII causes the textarea to glow with a yellow perimeter alert.
- In-Place Scrubbing: Click the shield button (or press
Alt+Shift+X) to immediately swap names and emails with anonymous tokens (e.g.[NAME_1]). The border glows green to confirm safety. - Automatic In-Place Reveal: When the AI responds, a floating overlay appears. Click Reveal to re-hydrate original identities in the browser DOM. No copy-paste required.
- PRO Feature: Quick-Switch Profiles: Hover over the injected shield button inside the chat field to switch between 22+ custom detection profiles (e.g. Legal, Finance, Medical, HR, DevOps) instantly. Changing profiles swaps rulesets in local memory.
TEAMS Session Handoff
The TEAMS feature allows one user to scrub a document and share the session state with colleagues so they can reveal AI outputs. The handoff package is encrypted with XChaCha20-Poly1305 using a key derived from the team's subscription ID via Argon2id (memory-hard KDF). The encrypted blob is shared via any channel (email, Slack, etc.). Only team members with the matching subscription ID can decrypt it.
For teams requiring a comprehensive AI security workflow across all platforms, see the secure AI pipeline guide which covers the full multi-tool workflow from document intake to AI output review.
New Platform Support: DeepSeek, Grok, Qwen & Kimi
PrivacyScrubber v1.6.4 extended the remote selectors.json config to support 4 additional AI platforms without a Chrome Web Store update: DeepSeek (chat.deepseek.com), Grok (x.ai/grok), Qwen (tongyi.aliyun.com), and Kimi (kimi.moonshot.cn). Each platform received a validated textarea + submit-button selector.
New platforms are added via the GET /selectors.json remote config endpoint — cached 24h in chrome.storage.local. When a new AI site launches, the selector config is updated server-side; the extension picks up the change at next cache expiry with zero user action required.
Omnibox Integration
Type ps in the Chrome address bar and press Tab to open the PrivacyScrubber popup inline. Type a search term or paste text in the omnibox to pre-populate the scrubbing field without switching tabs. Uses the chrome.omnibox API with the registered keyword ps.
Feature Reliability & Audit
This enterprise feature is powered by our Local-First Sanitization Engine. Unlike legacy cloud DLP tools, PrivacyScrubber processes your Chrome Extension: In-Page AI Redactor logic 100% within your browser's V8 sandbox. This architectural decision ensures that even the most complex detection patterns never expose raw data to an external API.
Airplane Mode
Verified feature operational integrity without network connectivity.
Step-by-Step Guide
How to use this feature
Install from Chrome Web Store
Search PrivacyScrubber in the Chrome Web Store or click the installation badge on this site. Click Add to Chrome and confirm.
Pin the extension
Click the puzzle icon in the Chrome toolbar → find PrivacyScrubber → click the pin icon to keep it visible in your toolbar at all times.
Open any supported AI tool
Navigate to chat.openai.com, claude.ai, gemini.google.com, or any web-based AI assistant. The extension automatically embeds a security shield next to the input.
Type or paste prompt text
Begin typing a prompt. The extension monitors the field. If PII is detected, the input area glows yellow to indicate sensitive data is present.
Scrub in-place
Click the in-page shield button or press Alt+Shift+X. The PII is instantly replaced with tokens (e.g., [NAME_1]), and the field turns green to confirm sanitization.
Submit & Reveal Responses
Submit the tokenized prompt. Once the AI responds, click the floating Reveal button on the toolbar to restore original identities inside the page.
Frequently Asked Questions
Which AI platforms does the extension support?
v1.6.4 supports 12 platforms: ChatGPT (chat.openai.com), Claude (claude.ai), Google Gemini (gemini.google.com), Microsoft Copilot (copilot.microsoft.com), Grok (x.ai/grok), DeepSeek (chat.deepseek.com), Perplexity (perplexity.ai), Qwen (tongyi.aliyun.com), Kimi (kimi.moonshot.cn), Zendesk Agent Workspace, Notion AI, and Slack (browser). New platforms are added via the remote selectors.json config without requiring a full extension update.
How do I switch detection profiles inside the extension popup and input fields?
You can change your active detection profile by opening the extension popup (Alt+Shift+P) and selecting from the 'Detection Profile' dropdown (e.g., General, Legal, HR, Finance, Medical, DevOps). Additionally, when typing inside a supported AI input, the injected shield button displays a quick-switch dropdown menu on hover, letting you swap profiles instantly without leaving the chat field.
What keyboard shortcuts does the extension provide?
Alt+Shift+P opens the extension popup. Alt+Shift+X scrubs the currently selected text and copies the sanitized result to the clipboard silently — no popup opens. Both shortcuts are configurable in Chrome's extension keyboard shortcut settings (chrome://extensions/shortcuts).
Where are extension session tokens stored?
In chrome.storage.session — a browser-session-scoped storage that is automatically purged when the browser closes. It is separate from localStorage and cannot be accessed by web pages. The token map is also scoped to the active profile key to prevent cross-user leakage in shared browser profiles.
Does the extension send any data to external servers?
Only one request: a GET to /selectors.json to fetch the latest AI platform CSS selector config (which textarea/input to intercept). This contains zero user data. The request is cached for 24 hours in chrome.storage.local. All scrubbing is local. No text ever leaves the browser.
How does the TEAMS session handoff (Patent Pending) work in the extension?
A TEAMS user creates a session package in the Secure Workspace: the sessionMap is encrypted with XChaCha20-Poly1305 using a key derived from the team's subscription ID via Argon2id. The encrypted package is shared (e.g., via Slack). A colleague imports it in their extension popup — the package decrypts only if they have the same subscription ID. No server involved.
What features require a PRO license versus a TEAMS license?
The Free extension handles basic text pasting and standard PII tags. Upgrading to PRO ($15/mo or $110 Lifetime) unlocks offline WebAssembly OCR, image/screenshot drops, PDF/DOCX local file processing, and unlimited custom regular expression rules. The TEAMS tier ($99/mo flat) adds the central admin dashboard, group policy deployment (MDM), and zero-server session handoff.
What happens if my device has no internet access? Will the extension still redact?
Yes. Once installed, the entire PrivacyScrubber engine runs completely offline. All regex pattern matching, entity lookaheads, and WebAssembly OCR operations are executed locally in the browser's RAM sandbox. The extension will fall back to its pre-loaded selector configurations if the network is disconnected.
How do custom regular expressions work in the extension?
PRO and TEAMS users can write custom regex strings or keyword lists in the Settings tab (e.g., blocking internal codenames or database keys). These custom rules are pre-processed and sorted descending by string length, ensuring they are evaluated first and do not overlap with core rules. All regex execution remains local in RAM.
How do we audit the extension to verify it isn't sending data to your servers?
Simply run the 'Airplane Mode' audit procedure: Open any supported AI tool, press F12 to open Chrome DevTools, navigate to the Network tab, and toggle your device to Airplane Mode. Execute a prompt scrub. You will observe that tokenization completes successfully with zero outbound Fetch, XHR, or websocket packets.
Can we lock the settings so employees cannot turn off auto-scrubbing?
Yes. Under the TEAMS and ENTERPRISE tiers, IT administrators deploying via Group Policy (MDM) can set the 'ps_auto_scrub' policy key to 'true' and configure the 'ps_settings_locked' key. This pushes the configuration to chrome.storage.managed, which overrides local preferences and prevents users from disabling the shield.
What is the refund policy for the PRO and TEAMS licenses?
We stand by our PII detection accuracy. If PrivacyScrubber PRO or TEAMS doesn't meet your needs, we offer a 30-day 'no questions asked' refund policy. Simply contact our support through our Support Hub.
Protect Your Team's AI Prompts in Under 30 Seconds
Protect My TeamNo server uploads. Works 100% offline in browser RAM.