Privacy Policy

Last updated: April 24, 2025

1. Who we are

PasteGuard is a Chrome browser extension developed as an independent project. For privacy-related inquiries, contact us at privacy@pasteguard.app.

2. What data we collect

Short answer: none.

PasteGuard does not collect, store, transmit, or share any personal data, clipboard content, or browsing activity. Specifically:

• We do not read your clipboard proactively. PasteGuard only intercepts a paste event at the moment you paste into a supported AI chat interface.
• We do not log, store, or transmit the text you paste, the sensitive data it detects, or the placeholders it generates.
• We do not collect usage statistics, analytics, crash reports, or telemetry of any kind.
• We do not track which websites you visit, which AI tools you use, or how often you use the extension.

3. Local storage only

The extension uses Chrome's chrome.storage.sync API exclusively to save your preference settings — specifically, which data categories (email, phone, etc.) you have enabled or disabled, and whether the extension is turned on or off.

These preferences are synced across your Chrome browsers via your Google account in the same way any browser setting is. PasteGuard has no access to this sync mechanism beyond reading and writing your own preferences.

4. How the extension works (technical detail)

All sensitive data detection runs in a content script — a sandboxed JavaScript environment that runs locally in your browser tab. The detection is performed using regular expressions applied directly to the text at the moment of a paste event, entirely in-memory. Once the paste is processed, the original text and the detected values remain only in the browser's JavaScript memory for the duration of the session, and are never written to disk or sent over the network.

5. License key validation (Pro and Business plans only)

If you purchase a Pro or Business subscription, you will receive a license key. When you enter this key in the extension popup, the extension sends only the license key to our license validation endpoint (hosted on Cloudflare Workers) to verify its validity and determine your subscription tier.

During this validation request:

• Only the license key string is transmitted — no personal data, no clipboard content, no browsing history.
• The server responds with: validity status, tier level, and expiry date.
• The result is cached locally in chrome.storage.sync and re-validated every 7 days.
• Standard server logs (IP address, timestamp) may be recorded by Cloudflare for security purposes, subject to Cloudflare's Privacy Policy.

6. Third-party services

PasteGuard (Free tier) makes zero third-party network requests. The extension does not load external scripts, fonts, analytics libraries, or tracking pixels.

For Pro/Business users, the only third-party service involved is:

• Cloudflare Workers — license key validation endpoint. See Cloudflare Privacy Policy.
• LemonSqueezy / Paddle — payment processing (handled entirely on their platform, not through the extension). See their respective privacy policies for purchase data.

7. Permissions used and why

• storage — Required to save your category toggle preferences and (for Pro users) your cached license status. Without this, your settings would reset every time you open the browser.
• activeTab — Required to inject the content script into the active AI chat tab. The extension only runs on explicitly listed domains (ChatGPT, Claude, Gemini, Copilot). It does not have access to any other tabs or websites.

We do not request, and have never requested, the clipboardRead permission. PasteGuard only intercepts paste events via the standard browser paste event listener — it never proactively reads your clipboard.

8. Children's privacy

PasteGuard is not directed at children under 13. We do not knowingly collect any information from children.

9. Changes to this policy

If we make material changes to this privacy policy, we will update the "Last updated" date at the top of this page. Continued use of PasteGuard after such changes constitutes acceptance of the updated policy.

10. Contact

For any privacy-related questions or requests, please contact us at privacy@pasteguard.app. We aim to respond within 72 hours.