# PromptShield Privacy Policy

_Last updated: August 8, 2026_

PromptShield ("the extension") is a Chrome browser extension that helps prevent users from accidentally pasting sensitive information — such as API keys, tokens, passwords, and personal identifiers — into AI chat websites.

## 1. What we collect

**Nothing.** PromptShield does not collect, transmit, sell, or share any personal data with the developer or any third party.

## 2. Data stored on your device

All extension data stays on your device inside Chrome's local storage (`chrome.storage`):

| Data | Where | Purpose |
|---|---|---|
| Settings (on/off, severity threshold, per-pattern toggles, monitored sites) | `chrome.storage.sync` (synced across your Chrome instances) | Remember your preferences |
| Block and allow logs (timestamp, site hostname, pattern names, severity, a short text preview) | `chrome.storage.local` (device only) | Show your paste/upload warning history in the popup and log viewer |

You can clear all stored logs at any time:
- **Popup** → Block log → "Clear" button
- **Log viewer** → "Clear All Logs" button
- Uninstalling the extension removes all stored data.

## 3. Permissions and why we need them

| Permission | Why |
|---|---|
| `storage` | Save your settings and block/allow logs locally |
| `clipboardRead` | Read clipboard text **only** during a paste event on a monitored AI chat site, to scan it for sensitive data |
| `tabs` | Detect when you visit a likely AI chat site so it can be auto-added to your monitored list; powers the "Detect sites from current tabs" popup button |
| `notifications` | Show one informational notification when a site is auto-added to monitoring |
| `host_permissions` (11 AI chat domains) | Run the content script on those sites to intercept paste and file upload events |

The extension does **not** read page content, does **not** monitor browsing history, and does **not** track you across sites.

## 4. Data we do NOT collect

PromptShield does **not**:
- Send data to any server
- Use analytics, telemetry, or tracking
- Show ads
- Share data with third parties
- Upload clipboard contents or scanned text anywhere

The only network access the extension makes is whatever the AI chat site itself does — PromptShield only intercepts the paste before it reaches the site.

## 5. Children's privacy

PromptShield is not directed at children under 13. We do not knowingly collect data from anyone.

## 6. Changes to this policy

Any changes will be posted here with an updated date. Material changes will be noted in the extension's changelog.

## 7. Contact

For privacy questions, open an issue at:
https://github.com/Yash0day/Kareri/issues