Datablur AI Privacy Policy

This policy covers Datablur AI, the browser extension that highlights and redacts personal data, API keys and secrets in AI chat prompts before you send them. The screen-blurring extension is a separate product with its own privacy policy.

The short version

The scan happens entirely in your browser. Your prompt text, the values Datablur AI detects, and the sites you visit are never transmitted — not to us, not to anyone.
The extension contacts exactly one company's servers — ours. Anonymous usage counters in the background, plus two pages it opens in a tab: a welcome page when you install and a survey when you uninstall. One toggle in the popup switches off the counters and the survey both.
This is enforced by the build, not just promised. The release pipeline scans every shipped file for networking code and fails if it finds any outside that one analytics call. The part of the extension that reads your prompt contains none.
No account, no login, no sync, no ads, no third-party trackers.

What stays on your device

All of this is computed in your browser and stored only in your browser's extension storage. None of it is uploaded.

The prompt being scanned — held in memory only, never written anywhere
The findings (the emails, keys, card numbers and so on that get highlighted) — in memory only
Your settings: mode, sensitivity, which detection categories are on, and the list of sites the extension runs on
Values you chose to "Ignore" — kept in the tab, gone when you close it
Session counters("N values protected this session") — reset when the browser restarts
Your analytics choice and a random install ID

What leaves your device

Anonymous usage counters, and nothing else. They go to a self-hosted Umami instance we run on our own EU servers. Umami is open-source and cookie-less. No third-party analytics vendor, ad network or data broker is involved, and the data is never sold or shared.

Default: on. One toggle turns it off. Open the Datablur AI popup → Settings → Anonymous usage analytics. Turning it off stops transmission immediately and deletes the random install ID from your device, so switching it back on later mints a fresh ID with no link to anything sent before. Analytics is also absent from development builds entirely.

The complete list of events

These are all of them. An event whose name or properties are not on this list is rejected before transmission by a hard-coded allow-list in the extension's source.

installed — extension version, browser
redacted — how many values, and in which mode
warned — that a warning was shown
mode_changed, sensitivity_changed, category_toggled, extension_toggled, analytics_consent_toggled — the new setting value
site_list_changed — how many sites are configured, never which ones

Every event also carries which part of the extension fired it and the random install ID.

What is never sent — and cannot be

These property names are permanently blocked in code. Any event carrying one is dropped instead of transmitted: hostname, host, url, href, title, text, prompt, value, finding, language, screen, user_agent, ip, location, cookies and their relatives.

Concretely, we never receive:

Your prompt text — not a word of it, not a hash of it, not a length
Any detected value — no emails, phone numbers, card numbers, SSNs, API keys, crypto addresses or names
Which sites you use — no hostnames, URLs, page titles or referrers. We cannot tell whether you use ChatGPT, Claude, Gemini, or a site you added yourself.
Your site list contents — only how many entries it has
Any account identity — there is no account. No email, no name, no device ID, no advertising ID.
Screen recordings or session replay — none exist

A worked example

You paste my SSN is 123-45-6789 and the key is sk-ant-api03-… into ChatGPT and click Redact all, then send.

What we receive: one redacted event, count: 2, mode: warn
What we do not receive: the SSN, the API key, the sentence, the fact that it was ChatGPT, the conversation, or anything else about that page

What the server unavoidably observes

Any HTTP request to any server reveals the originating IP address and the request headers — that is how the internet works, not a choice Datablur AI makes. Our analytics instance uses this to derive a coarse country and a browser/OS family, and discards the rest. Raw IP addresses are not stored. Requests are sent without cookies, and none are set. If even that is more than you want, turn the toggle off — then no request is made at all.

Pages we open

Two moments in the extension's life open a page on this site. These are ordinary tab navigations that you can see happening — not background requests — but your browser still contacts our server to load them, so they belong here.

When you install, a welcome page opens at datablur.app/ai/welcome. It explains what the extension does. Nothing about you is attached to the address.
When you uninstall, your browser opens a short survey asking why. The address carries the extension version and how many days it had been installed — nothing else, and nothing that identifies you. This one is covered by the analytics toggle: switch analytics off and the survey is deregistered, so uninstalling opens nothing.

Both addresses also carry utm_source / utm_medium / utm_campaign — fixed labels baked in when the extension is built (chrome-extension vs firefox-addon, and which moment opened the page) that tell us where our own traffic came from. They are identical for every user and say nothing about you.

The uninstall survey is a Chrome feature; Firefox has no equivalent and never opens anything. Answering the survey is optional — closing the tab sends nothing.

Retention

On-device data (settings, counters, install ID): kept until you delete it or uninstall the extension
Analytics events: kept for up to 12 months on our own servers, then deleted
Uninstall survey answers (only if you submit one): the reason you picked and anything you typed, kept while it is still useful for improving the product

Permissions the extension asks for

Storage: to keep your settings and counters on your device. Nothing here is synced or uploaded.
Tabs: to show the finding count on the toolbar icon for the right tab, and to open the welcome page once on install. No tab URLs are read, stored or sent.
Access to the pages you visit: warning you before you send means reading the prompt box as you type. That reading happens in your browser, and the extension writes back only when you ask it to redact. You control which sites it acts on from the popup — by default, only known AI chat sites. The code that does this reading contains no networking of any kind.
data.datablur.app: the single analytics endpoint above. Remove your consent and it is never contacted.

Your rights (GDPR / CCPA)

Opt out:switch off "Anonymous usage analytics" in the popup. No account, no form.
Deletion: turning the toggle off deletes the install ID from your device. Uninstalling removes everything else stored locally.
Access: email support@datablur.app. Because analytics is tied only to a random ID and holds nothing that identifies you, there is in practice no personal record to hand over.
No discrimination: opting out changes nothing about how the extension works.
No sale of data. We do not sell personal information and never have.

Children

Datablur AI is not directed at children under 13 and knowingly collects no data from them. Since it collects no personal data from anyone, there is nothing to delete on request.

Store compliance

Single purpose: detecting personal data, API keys and secrets in the text you type into AI chat prompt boxes, and letting you redact them before sending
No data sold, ever
Third parties: none. Analytics is self-hosted and shared with nobody.
Everything in transit is encrypted with HTTPS

Changes to this policy

We update this policy as Datablur AI changes. The effective date at the top always reflects the current version. If a future release ever collects something not listed above, it will be described here before it ships.

Contact

Questions, privacy requests, or abuse reports: support@datablur.app

Datablur AI — Privacy Policy