Cloakshot Prompt
Privacy Policy
The short version
Cloakshot Prompt runs entirely inside your browser. It reads what you paste or type into the chat composer of the sites you enable, detects sensitive data locally, and replaces it with placeholders before the site sends it. We have no servers that receive your prompts, the detected values or the placeholder map. The extension does not collect, transmit or sell personal data, and it contains no analytics.
What the extension processes, and where
| Data | Where it is processed | Where it is stored | Sent anywhere? |
|---|---|---|---|
| Text you paste or type into a chat composer on an enabled site | In the page, in your browser | Not stored | No — only the masked text is sent, by the site itself, to the AI provider you are using |
| Placeholder map (which placeholder stands for which original value) | In the page | In the tab's memory only; discarded when the tab is closed or reloaded | No |
| Your settings (mode, detectors, protected words, patterns, sites) | In your browser | Chrome extension storage, synced by Chrome to your Google account if Chrome sync is enabled | Only through Chrome's own sync, which we don't control |
| Activity counts (per day and site: how many items were masked, sent as is, or cancelled, and their categories) | In your browser | Local extension storage for 90 days | No. Counts never include the text or the values |
| Managed policy (Team) | Read from Chrome's managed storage, set by your organization's administrator | Controlled by your organization | No |
| Pro / Team license key and activation state | In your browser | Local extension storage | Yes, to the license server (see below) |
License activation (Pro and Team only)
If you activate a license, the extension sends your license key and an instance label such as "Chrome on Windows" to the license API of our payment provider to activate the key, and re-validates it about once a day. No prompt content, detected values, placeholder maps or browsing data are included in these requests. If you deactivate the license or uninstall the extension, no further requests are made.
Purchases
Purchases are made through our payment provider acting as merchant of record, which collects the billing details required to process the payment, issue receipts and handle taxes. We receive your email address and order details so we can provide support and honor refunds. We do not receive your card number. Companies that prefer to be invoiced directly in BRL can contact us; in that case we collect the company details needed to issue a nota fiscal.
Browser permissions and why
- Access to the AI chat sites listed in the extension (and any site you add): to read the composer and intercept paste and send actions. The extension runs only on those sites.
- storage: to keep your settings, activity counts and license state.
- scripting: to enable the guard on additional sites you add (Pro).
- alarms: to schedule the daily license re-validation.
Website
orbecode.com is a static website. It sets no cookies and includes no analytics. Checkout pages are provided by our payment provider.
Children
Cloakshot Prompt is not directed at children under 16 and we do not knowingly collect data from them.
Changes
If this policy changes, the new version will be published at this address with a new effective date.
Contact
Cloakshot Prompt is developed by Principia (Romenig da Silva Ribeiro Ltda, Biro Editorial Principia), Brazil. Questions: romenig@biroprincipia.com.br.