Privacy Policy — PII Guard

Last updated: 2026-08-01

PII Guard is a browser extension that detects personal data (PII) in text you type or paste into web pages, and redacts it locally before it reaches the page. This document explains what the extension does with your data, in plain terms, and how that maps to Indonesia's personal data protection law (UU No. 27/2022 tentang Pelindungan Data Pribadi, "UU PDP").

1. What PII Guard does

Runs entirely inside your browser, on your device.
Scans text in editable fields (inputs, textareas, contenteditable elements) and clipboard pastes for patterns that look like personal data or secrets (email addresses, phone numbers, national ID numbers, credit card numbers, API keys, etc.).
When a match is found, it replaces the matched text with a mask (e.g. [EMAIL]) before the text is submitted or inserted, and shows an on-page notification with an option to undo.
Never transmits the text you type, paste, or the matches it finds to any server. There is no backend. The extension has no network permissions and makes no network requests.

2. What data is stored, and where

Data	Where it's stored	Leaves the device?
Your settings (which detectors are on, mask style, website whitelist profiles, custom rules you define)	`chrome.storage.local` / `browser.storage.local` — on-device only	No
Session redaction count (a number, shown as a badge)	`chrome.storage.local` / `browser.storage.local` — on-device only	No
Settings password (optional, see §6)	A salted PBKDF2 hash, on-device only	No
The actual text you type or paste, or any matched PII	Never stored	No

All storage uses the browser's local storage area, not the sync area, specifically so that settings and stats are never synchronized to your Google/Mozilla account or any cloud service. Nothing PII Guard stores leaves your device, in any form, at any time.

3. Permissions

storage — to save your settings locally, as described above.
activeTab — so the popup can show and toggle protection for the site you're currently viewing.
Content script access to page content (<all_urls>) — required for the core feature: PII Guard has to read the text you're typing to detect and redact it before it's submitted. This scanning happens locally and the content is discarded immediately after each check; it is not logged, stored, or sent anywhere.

4. Your rights under UU PDP

Because PII Guard does not collect, transmit, or store your personal data anywhere outside your own device, there is no dataset held by the developer for which to exercise data subject rights (access, correction, deletion, objection, portability under UU PDP Articles 5–9) — the developer never receives or holds your data in the first place. You remain in full control of your data on your own device at all times:

Access / deletion: open the extension's Options page to see and clear your settings, or uninstall the extension to remove all locally stored data.
Objection / withdrawal: disable protection globally or per-site from the popup at any time.

5. Website whitelist profiles

You can group whitelisted domains — sites where PII Guard does nothing — into named profiles (e.g. "Work", "Personal") and switch which one is active, instead of maintaining a single flat list. Only the active profile's domains are ever enforced. You can:

add a domain to the currently-selected profile from the Options page, or toggle the current site off from the popup (which edits the active profile),
create a new empty profile and give it a name,
import a profile in bulk by uploading a .txt file (one domain per line) from your own computer — this is read and parsed entirely in your browser via the File API; the file's contents are never uploaded or sent anywhere, only stored locally as part of your settings.

All profile data is stored locally as part of your settings, same as everything else in §2 — it is never sent anywhere.

6. Settings password

You can optionally set a password to prevent changes to your settings (including whitelist profiles, detectors, and custom rules) without it. If set:

Only a salted hash of the password is stored (PBKDF2-SHA256, 100,000 iterations), never the password itself, and never in plain text.
The password is never transmitted anywhere — it's checked entirely on-device, the same way everything else in this extension works.
This is a local convenience lock, not a cryptographic security boundary: anyone with access to your unlocked browser's developer tools could bypass it, the same as any client-side-only lock in any browser extension. It's meant to prevent casual/accidental changes (e.g. a shared or managed device), not to resist a determined technical attacker with device access.
If you forget the password, there is no recovery — uninstalling and reinstalling the extension clears it along with all other settings.

7. Custom rules

If you create a custom detection rule, the label, mask token, and regular expression pattern you define are stored locally (same as other settings). Avoid embedding real personal data values directly into a custom pattern — use a regular expression that matches the shape of the data instead.

8. Children's data

PII Guard does not knowingly collect data from anyone, including children, because it does not collect data at all.

9. Changes to this policy

If the extension's data practices change (for example, if a feature that requires network access is ever added), this policy will be updated and the version history will be kept in the extension's repository.

10. Contact

For questions about this policy, contact: brahmanggi@gmail.com