Software studio · São Paulo, Brazil

Software that keeps your data where it already is.

We design and build small, focused tools for people who handle other people's data all day. They run inside your browser or your machine — no accounts to create, no servers to trust, no subscription that grows every year.

See the products How we build

2Products shipped

0Bytes sent to us

One-timePricing, not rental

14 daysMoney back

Products

Two tools for the same problem: sensitive data leaving by accident.

Both are Chrome extensions, both do the work locally, and both are free to try before you pay anything.

Cloakshot

Live in the Chrome Web Store

Screenshots with the sensitive parts already gone. Cloakshot scans the page, covers what looks like personal or secret data with solid black boxes, and only then captures — so the sensitive pixels never enter the image.

Emails, phones, cards (Luhn-checked), CPF/CNPJ, SSN, IBAN, API keys, tokens and IPs
Click-to-cover mode for names and anything patterns can't know
Editor with black box, blur and pixelate; copy or download the PNG
Free tier, then a one-time Pro licence for 3 browsers

Add to Chrome — free Product page

A page with emails, card numbers and IDs covered by solid black boxes

Cloakshot Prompt

Live in the Chrome Web Store

Your prompts, minus the customer data. When a paste or a message contains sensitive values, Prompt stops it before it is sent and swaps the values for stable placeholders like [EMAIL_1] — the assistant still understands the request, it just never sees the real data.

Reversible placeholders: copy the answer and the originals come back, locally
Ask, auto-mask or off, decided per site
Your own protected words and regex patterns (Pro)
Managed policy for teams, pushed from the admin console

Add to Chrome — free Product page

A dialog listing the email address, phone number and card number found in the message, with the option to send it masked

How we build

Six rules we don't break.

They cost us features and revenue on purpose. They are also the reason the tools are safe to install at work.

Local first, by construction

Detection, masking and capture happen on your device. There is no proxy and no upload step to opt out of — the only request our extensions ever make is licence activation.

No accounts

Nothing to sign up for, no profile, no telemetry tied to a person. Usage counters stay in your browser and can be cleared in one click.

Pay once where we can

Tools that don't cost us anything to run are sold once, not rented. Where a subscription is unavoidable, it is small, yearly and cancellable.

We say what doesn't work

Pattern matching finds structured data, not names or addresses. We write that on the product page instead of letting you find out during an incident.

Tested, not hoped

Every release runs a detection suite plus end-to-end tests in a real browser before it is packaged. Bugs are cheaper than an apology to a customer.

Small on purpose

One job per tool, a codebase a single person can hold in their head, and no dependency we couldn't replace in an afternoon.

Under the hood

Built like infrastructure, priced like a tool.

Both products share one detection engine and one licensing layer. No backend of ours sits between you and your data — which is also why there is nothing for us to leak.

EngineValidated detectors: Luhn for cards, check digits for CPF/CNPJ, mod-97 for IBAN, issuer formats for API keys.

PlatformManifest V3 extensions for Chrome, Edge and Brave. Closed shadow DOM UI so no page can read or fake it.

TeamsForce-install and one JSON policy through the admin console: mode, protected words, sites, licence.

LicensingKeys verified against the payment provider, cached with a 14-day offline grace period.

Guides

What we learned, written down.

Practical notes on redaction: what works, what only looks like it works, and what auditors ask for.

How to redact a screenshot in Chrome

Three ways, from manual to automatic, plus a checklist of what people forget.

Can blurred text be recovered?

Why solid boxes are the only redaction that leaves nothing behind.

Screenshot redaction tools compared

Six options side by side, including the ones that beat ours at their own job.

Hiding data during a demo or screen share

Keeping customer data off the screen on a live call, without a staging environment.

PT-BR

Como tarjar dados em print de tela

E por que borrar não resolve — com CPF, CNPJ e o que passa batido.

PT-BR

LGPD e print de tela

Quando o print vira tratamento de dado pessoal e uma política de uma frase.

All guides →

Company

Who is behind this.

Orbecode is the software line of a Brazilian company, run by a developer who got tired of watching customer data leak out of screenshots and chat windows in ordinary, well-meaning work. Everything you see here — engine, extensions, site, guides — is built in-house.

Legal entity: ROMENIG DA SILVA RIBEIRO LTDA
Trade name: Biro Editorial Principia
CNPJ: 67.890.364/0001-65
Based in: Santo André, São Paulo, Brazil
Sells to: Worldwide, in USD, through a merchant of record that handles invoices and taxes

Talk to us

Questions about a licence, an invoice with your company details, a team deployment, or a bug you found: one person reads this inbox and answers.

romenig@biroprincipia.com.br

Brazilian companies: we issue an invoice in BRL with nota fiscal on request.