Privacy Policy — AI Guardian

Last updated: July 9, 2026

AI Guardian (“the Extension”) is a browser extension that helps you avoid accidentally sending sensitive information (API keys, passwords, personal data, secrets, etc.) to AI chatbots. This policy explains what the Extension does with your data.

AI Guardian does not collect, sell, or transmit your data to the developer. All core scanning happens locally on your device.

1. What the Extension does

When you type a message into a supported AI chatbot (ChatGPT, Claude, Gemini, Perplexity, Microsoft/GitHub Copilot, Poe, Cursor) and try to send it, the Extension scans the text locally, in your browser for patterns that look sensitive. If something is found, it shows you a warning and lets you redact the data, send anyway, or cancel.

2. Data we collect

None is sent to the developer. The Extension has no analytics, no tracking, and no developer-owned servers. Specifically:

• Message content you type is analyzed locally and is never stored or sent anywhere by the Extension itself (except the optional AI scan in Section 3).
• Usage statistics (e.g. how many leaks were blocked) are stored only on your own device using the browser’s local storage. They never leave your device.
• Settings (your allowlist, toggles, and — if you add one — your Gemini API key) are stored only on your own device using the browser’s local storage.

3. Optional AI (“Deep Scan”) feature

The Extension includes an optional “AI LLM Deep Scan” feature that is turned off by default. It only works if you:

• Provide your own Google Gemini API key, and
• Turn the feature on in Settings.

When enabled, and only when a message is being checked, the text of that message is sent to Google’s Gemini API (generativelanguage.googleapis.com) using your own API key, so Google’s AI can help detect sensitive content the local scan may miss. This data is sent directly from your browser to Google. It is not routed through, seen by, or stored by the developer.

Any data sent to Google in this way is subject to Google’s Privacy Policy and the Gemini API / Google APIs Terms of Service. You can disable this feature or remove your API key at any time in Settings.

If you do not enable this feature, no message content ever leaves your device.

4. Where your data is stored

• Your Gemini API key, settings, allowlist, and statistics are stored using chrome.storage.local — that is, only on your device.
• Uninstalling the Extension removes this data.

5. Permissions and why they are needed

• storage — to save your settings, allowlist, and statistics on your device.
• activeTab — to interact with the chatbot page you are actively using.
• Host access to the supported chatbot sites and to generativelanguage.googleapis.com — to scan messages on those sites and (only if you enable Deep Scan) to call the Gemini API with your key.

The Extension does not request access to your email, browsing history, or other websites.

6. Data sharing and sale

We do not sell, rent, or share your data with anyone. The only external data transfer that can occur is the optional Gemini API call described in Section 3, which you control and which uses your own API key.

7. Children

The Extension is not directed at children under 13 and does not knowingly collect data from them.

8. Changes to this policy

If this policy changes, the updated version will be published at the same location with a new “Last updated” date.

9. Contact

Questions about this policy? Contact: ai.guardian.help@gmail.com