Privacy

Short version: there is nothing to collect, so nothing is collected.

The website

• This site is static. It has no analytics, no cookies, and no trackers.
• The live demo runs entirely in your browser. Text you type in the demo is never sent anywhere.
• The site is hosted on GitHub Pages, which may log standard requests (IP address, user agent) as any web host does. See GitHub's privacy statement for details.

The CLI and proxy

• MaskPrompt processes text locally on your machine and works offline.
• The vault file and audit log are written to your disk only. The audit log stores hashes and previews, never raw secrets.
• The tool makes no network calls except the proxy, which forwards your request to the AI provider you configured, after masking.

The browser extension

• Detection and masking run inside your browser. Nothing you type is sent to us; there is no “us” server at all.
• Settings and the local vault are stored with the browser's local storage for the extension.
• The extension has no analytics and no remote configuration.

Questions

Email zeolant@maskprompt.dev or open an issue on GitHub. If this policy ever changes, the change will be visible in the repository history.