Zero-Trust Data Sanitization

Chrome Extension: In-Page AI Redactor

The Browser AI Shield: Native Redaction for ChatGPT & Claude

100% Local RAM Airplane Mode 0 Bytes Egress
Launch Free WorkspaceAdd to Chrome
Free to start · $0 Free / $99/mo Teams
Chrome Extension PII Shield

AI Summary / Key Takeaways

Verified Zero-Trust Logic

"Free Chrome extension that automatically scrubs PII inside ChatGPT, Claude, and Gemini before submission. Zero cloud leaks, runs 100% in local browser RAM."

Install Extension: Add the extension to Chrome. It natively integrates with 12 popular AI chat platforms (ChatGPT, Claude, Gemini, Copilot, etc.).
Live Interception: Automatically injects a security shield button directly into chat inputs. Monitors input fields to sanitize prompts in-place before submission.
Local Reveal: Restores original values directly inside the chat interface using a volatile, tab-isolated browser-session memory map.

Enterprise-Grade AI Privacy

Add custom redaction rules and priority support with PRO.

GO PRO
Live Turnkey Simulator · ZTDS Engine

Interactive PII Detection & Sanitization Sandbox

Test real-time client-side RAM tokenization. Choose a specialized preset or paste your own raw prompt to test instant reversible redaction.

Protected in Browser AI Shield: CustomerSSNPhone NumbersEmail AddressesPANAPI Access Keys
0 Bytes Server Egress
<1.8ms Latency
Select Industry Test Payload:
Raw Input Payload
0 chars
RAM-Only Isolated Session
1-Click Safe AI Launch:
Automated Detection Classes:
Customer / Employee NamesSSNPhone NumbersEmail AddressesCredit Card Numbers (PAN)API Access Keys / TokensPhysical AddressesInternal Server Hostnames
Open in Full Workspace
Enterprise Challenge

The Challenge with AI Data Workflows

Employees circumvent centralized AI portals by using ChatGPT directly in their browser. Training them to copy-paste through a separate scrubbing tool leads to friction and inevitable compliance failures when they forget.

Zero-Egress Data Protection
Eliminates corporate data leaks before prompts hit external AI models.
Zero-Trust Resolution

How It Works

1

Install Extension

Add the extension to Chrome. It natively integrates with 12 popular AI chat platforms (ChatGPT, Claude, Gemini, Copilot, etc.).

2

Live Interception

Automatically injects a security shield button directly into chat inputs. Monitors input fields to sanitize prompts in-place before submission.

3

Local Reveal

Restores original values directly inside the chat interface using a volatile, tab-isolated browser-session memory map.

Supported Formats & Limitations

Supported Formats

Browser DOMTextareasContentEditable elements

System Limitations

  • Requires Chromium-based browser (Chrome, Edge, Brave, Arc)
  • Scrubbing highly complex rich-text editors (like Google Docs) may strip specific formatting tags
  • Cannot intercept requests made outside the browser environment

Chrome Extension Technical Architecture

The PrivacyScrubber Chrome extension brings the same zero-trust detection engine directly to 12 AI platforms. It uses Google Manifest V3 architecture — a content script model where all processing happens inside the browser tab's renderer process, with zero background server communication for PII data.

Supported AI Platforms

PlatformURLInjection Mode
ChatGPTchat.openai.comIn-Page Shield + Floating Toolbar + Auto-Scrub
Claudeclaude.aiIn-Page Shield + Floating Toolbar + Auto-Scrub
Geminigemini.google.comIn-Page Shield + Floating Toolbar + Auto-Scrub
Microsoft Copilotcopilot.microsoft.comIn-Page Shield + Floating Toolbar + Auto-Scrub
Grok, DeepSeek, Perplexityx.ai, deepseek.com, perplexity.aiIn-Page Shield + Floating Toolbar + Auto-Scrub
Qwen, Kimialiyun.com, moonshot.cnIn-Page Shield + Floating Toolbar + Auto-Scrub
Zendesk, Notion, Slackzendesk.com, notion.so, slack.comIn-Page Shield + Floating Toolbar + Auto-Scrub

Interactive Feature & Workflow Guide

Explore the different ways the Chrome Extension secures your prompt pipeline. Click the tabs below to view detailed workflows and usage mockups.

Zero-Friction In-Page Sanitization

The extension automatically identifies prompt entry fields in your browser window and embeds a Privacy Shield badge directly beside them.

  • Real-time Input Glow: Typing sensitive PII causes the textarea to glow with a yellow perimeter alert.
  • In-Place Scrubbing: Click the shield button (or press Alt+Shift+X) to immediately swap names and emails with anonymous tokens (e.g. [NAME_1]). The border glows green to confirm safety.
  • Automatic In-Place Reveal: When the AI responds, a floating overlay appears. Click Reveal to re-hydrate original identities in the browser DOM. No copy-paste required.
  • PRO Feature: Quick-Switch Profiles: Hover over the injected shield button inside the chat field to switch between 30 specialized detection profiles (e.g. Legal, Finance, Medical, HR, DevOps) instantly. Changing profiles swaps rulesets in local memory.
DOM Injector Mockup
PII Detected State
Please schedule a clinical review with John Doe (DOB 12/04/1982) at john.doe@hosp.org...
Scrubbed & Secured State
Please schedule a clinical review with [NAME_1] (DOB [ID_1]) at [EMAIL_1]...

TEAMS Session Handoff

The TEAMS feature allows one user to scrub a document and share the session state with colleagues so they can reveal AI outputs. The handoff package is encrypted with XChaCha20-Poly1305 using a key derived from the team's subscription ID via Argon2id (memory-hard KDF). The encrypted blob is shared via any channel (email, Slack, etc.). Only team members with the matching subscription ID can decrypt it.

For teams requiring a comprehensive AI security workflow across all platforms, see the secure AI pipeline guide which covers the full multi-tool workflow from document intake to AI output review.

Platform Architecture: Dynamic Selectors

PrivacyScrubber extends its remote selectors.json config to support new and evolving AI platforms without requiring a Chrome Web Store re-review: DeepSeek (chat.deepseek.com), Grok (x.ai/grok), Qwen (tongyi.aliyun.com), Kimi (kimi.moonshot.cn), ChatGPT, Claude, and Gemini. Each platform receives a validated textarea + submit-button selector.

New platforms are added via the GET /selectors.json remote config endpoint — cached 24h in chrome.storage.local. When a new AI site launches, the selector config is updated server-side; the extension picks up the change at next cache expiry with zero user action required.

Omnibox Integration

Type ps in the Chrome address bar and press Tab to open the PrivacyScrubber popup inline. Type a search term or paste text in the omnibox to pre-populate the scrubbing field without switching tabs. Uses the chrome.omnibox API with the registered keyword ps.

Client-Side ZTDS™ Execution & Conformance Verification

All PII detection and deterministic tokenization execute 100% inside local client memory — eliminating cloud proxies, external subprocessors, and network data egress.

100% Local RAM Airplane Mode Verified IETF RFC Draft
ZTDS™ Verified
ZTDS-CERT-2026-PRIVACYSCRUBBER-WEB-D02DC6
ZTDS™ RFC v1.0 Verified Capability·ZTDS-CERT-2026-PRIVACYSCRUBBER-WEB-D02DC6
Verify Cryptographic Seal

Frequently Asked Questions

Technical Details & Privacy Architecture

Which AI platforms does the extension support?
The extension natively supports 12 platforms: ChatGPT (chat.openai.com), Claude (claude.ai), Google Gemini (gemini.google.com), Microsoft Copilot (copilot.microsoft.com), Grok (x.ai/grok), DeepSeek (chat.deepseek.com), Perplexity (perplexity.ai), Qwen (tongyi.aliyun.com), Kimi (kimi.moonshot.cn), Zendesk Agent Workspace, Notion AI, and Slack (browser). New platforms are added via the remote selectors.json config without requiring a full extension update.
How do I switch detection profiles inside the extension popup and input fields?
You can change your active detection profile by opening the extension popup (Alt+Shift+P) and selecting from the 'Detection Profile' dropdown (e.g., General, Legal, HR, Finance, Medical, DevOps). Additionally, when typing inside a supported AI input, the injected shield button displays a quick-switch dropdown menu on hover, letting you swap profiles instantly without leaving the chat field.
What keyboard shortcuts does the extension provide?
Alt+Shift+P opens the extension popup. Alt+Shift+X scrubs the currently selected text and copies the sanitized result to the clipboard silently — no popup opens. Both shortcuts are configurable in Chrome's extension keyboard shortcut settings (chrome://extensions/shortcuts).
Where are extension session tokens stored?
In chrome.storage.session — a browser-session-scoped storage that is automatically purged when the browser closes. It is separate from localStorage and cannot be accessed by web pages. The token map is also scoped to the active profile key to prevent cross-user leakage in shared browser profiles.
Does the extension send any data to external servers?
Only one request: a GET to /selectors.json to fetch the latest AI platform CSS selector config (which textarea/input to intercept). This contains zero user data. The request is cached for 24 hours in chrome.storage.local. All scrubbing is local. No text ever leaves the browser.
How does the TEAMS session handoff (Patent Pending) work in the extension?
A TEAMS user creates a session package in the Secure Workspace: the token dictionary is encrypted with XChaCha20-Poly1305 using a key derived from the team's subscription ID via Argon2id. The encrypted package is shared (e.g., via Slack). A colleague imports it in their extension popup — the package decrypts only if they have the same subscription ID. No server involved.
What features require a PRO license versus a TEAMS license?
The Free extension handles basic text pasting and standard PII tags. Upgrading to PRO ($15/mo or $110 Lifetime) unlocks offline WebAssembly OCR, image/screenshot drops, PDF/DOCX local file processing, and unlimited custom regular expression rules. The TEAMS tier ($99/mo flat) adds the central admin dashboard, group policy deployment (MDM), and zero-server session handoff.
What happens if my device has no internet access? Will the extension still redact?
Yes. Once installed, the entire PrivacyScrubber engine runs completely offline. All contextual entity analysis, deterministic token mapping, and WebAssembly OCR operations are executed locally in the browser's RAM sandbox. The extension will fall back to its pre-loaded selector configurations if the network is disconnected.
How do custom regular expressions work in the extension?
PRO and TEAMS users can configure custom data patterns or keyword lists in the Settings tab (e.g., blocking internal codenames or proprietary database keys). These custom rules are evaluated through our priority resolution pipeline, ensuring enterprise patterns take precedence while preventing rule collisions. All execution remains strictly local in RAM.
How do we audit the extension to verify it isn't sending data to your servers?
Simply run the 'Airplane Mode' audit procedure: Open any supported AI tool, press F12 to open Chrome DevTools, navigate to the Network tab, and toggle your device to Airplane Mode. Execute a prompt scrub. You will observe that tokenization completes successfully with zero outbound Fetch, XHR, or websocket packets.
Can we lock the settings so employees cannot turn off auto-scrubbing?
Yes. Under the TEAMS and ENTERPRISE tiers, IT administrators deploying via Group Policy (MDM) can set the 'ps_auto_scrub' policy key to 'true' and configure the 'ps_settings_locked' key. This pushes the configuration to chrome.storage.managed, which overrides local preferences and prevents users from disabling the shield.
What is the refund policy for the PRO and TEAMS licenses?
We stand by our PII detection accuracy. If PrivacyScrubber PRO or TEAMS doesn't meet your needs, we offer a 30-day 'no questions asked' refund policy. Simply contact our support through our Support Hub.
100% Zero-Trust Deployment

Protect Your Team's AI Prompts in Under 30 Seconds

Add PrivacyScrubber directly to your browser for seamless in-page masking.

Install Chrome ExtensionView Flat Team Pricing