PII Pelindung — Privacy Policy
Ringkasan (Bahasa Melayu): PII Pelindung menyemak mesej anda di dalam pelayar sebelum dihantar ke chat AI dan menggantikan maklumat peribadi dengan penanda seperti [NAMA_1]. Secara lalai, semua semakan dibuat dalam pelayar anda dan tiada teks dihantar ke mana-mana server. Teks hanya dihantar ke server pilihan anda jika anda sendiri memasukkan alamat server dan kunci semak dalam Options. Kami tidak menjual data, tidak menggunakan iklan atau analitik, dan tidak menggunakan kod jauh.
1. What the extension does
PII Pelindung is a browser extension that detects personal information (for example names, Malaysian identity card numbers, phone numbers, email addresses, home addresses, and bank or card numbers) in the message you are about to send to an AI chat website, and offers to replace it with placeholders such as [NAMA_1] before sending. It is developed by Arizal ("the developer").
2. Data the extension handles
| Data | Why | Where it goes |
|---|---|---|
| The text of the message in the chat box, read only at the moment you press Enter or Send on a supported site | To detect personal information and build the protected version | Default: checked locally inside your browser; not transmitted anywhere. Optional server mode: sent over HTTPS to the server address you configure (see section 3). |
Placeholder-to-value mapping (for example [NAMA_1] ↔ the original name) | To show your own screen the real values in AI replies | Kept in the browser's session storage on your device only; cleared when the browser is closed. Never sent to the AI site or to any server. |
| Settings (pause switch, restore option, optional server address and check key, list of extra sites you enabled) | To remember your choices | Stored in the browser's local extension storage on your device. |
The extension does not read your browsing history, other tabs, cookies, or passwords. It runs only on the supported AI chat sites and on any additional site you explicitly enable from the extension popup.
3. Optional server mode
By default the extension needs no account, key, or server. If you enter a server address and a check key in Options → Advanced, the text of the message you are sending is sent over HTTPS to that server so that a more accurate detection engine can check it. The server returns only the detection result (types and positions of personal information). The developer's reference server (storage.megatechsolution.org/pii-proxy) does not store the text of checked messages. You can leave the key empty at any time to return to local-only mode.
If the option "Record decisions" is enabled and server mode is in use, the extension also reports your choice (send protected / send original / edit), the types and number of personal items detected, the site's hostname, the engine used, and the time taken to decide. These records contain no message text. They are used for research on how people respond to privacy warnings. You can switch this option off in Options.
4. What we do not do
- We do not sell or transfer user data to third parties, other than as described in section 3 to the server you choose.
- We do not use or transfer user data for purposes unrelated to the extension's single purpose of detecting and masking personal information.
- We do not use or transfer user data to determine creditworthiness or for lending purposes.
- We do not show ads and do not use third-party analytics or tracking.
- We do not use remote code. All JavaScript is packaged in the extension.
The use of information received from browser APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.
5. The AI sites you use
What you finally send to a chat website (the protected version or the original, as you choose) is received by that website and handled under its own privacy policy. The extension cannot control this and does not scan uploaded files or images, only text typed or pasted into the chat box.
6. Permissions
- Content scripts / host access on AI chat sites — to check the message before it is sent and to restore placeholders on your screen.
- activeTab and scripting — to enable protection on an additional site only when you click "Enable on this site".
- storage — to keep your settings and the temporary session mapping on your device.
- Optional host permissions — requested at the time you choose a site or server, never in advance.
7. Retention and deletion
Locally stored settings remain until you change them or uninstall the extension; the session mapping is removed when the browser closes. Decision records held on a server (section 3) contain no message text; to ask for their removal, contact the developer below.
8. Children
The extension is not directed at children under 13 and does not knowingly collect information from them.
9. Changes to this policy
If this policy changes, the new version will be posted at this address with an updated effective date. Material changes in how data is handled will also be reflected in the Chrome Web Store listing.
10. Contact
Questions or requests: [email protected]