Don't take our word for it. Watch nothing leave.
Hushtag says your text is hushed on your own computer and never sent to us. Here are four ways to prove that, from 30 seconds to five minutes. None of them need technical skills except the last.
1 · Try it on this page and count the requests
This page loads the same detector the extension uses. Click Hush. The counter shows every network request this page makes from that moment on.
Click Hush to start counting.
2 · Turn your Wi-Fi off
- Open the Hushtag web app once so it's saved in your browser.
- Turn off Wi-Fi (or unplug the network cable, or switch your phone to airplane mode).
- Paste some made-up client details into the app and press Hush. It still works, because nothing needs to be sent anywhere.
The same is true of the Chrome extension: with the internet off, a paste into an AI chat box is still hushed (the AI site itself just won't load new answers until you're back online).
3 · Read the extension's permissions
In Chrome, open chrome://extensions, click Details under Hushtag, then Site access. You'll see it can only run on the AI chat sites it protects, plus one address: api.lemonsqueezy.com, our payment provider, which checks a license key. Every permission and why it's needed is listed on our security page.
4 · Watch the traffic (5 minutes, a little technical)
- Open ChatGPT (or Copilot, Claude, Gemini) in Chrome or Edge and press F12 to open Developer Tools. Click the Network tab.
- Paste made-up client details into the chat box and send.
- Click the request the chat site sends (its name varies by site; use the search box in the Network tab to search for one of your hashtags, for example
PERSON_1). In its Payload, you'll find hashtags like#PERSON_1, not the real name. - Filter the Network list for
hushtag. You won't find any request to a Hushtag server, because there isn't one.
Our website itself is locked down the same way. Its security policy (you can read it in the response headers of any page) only allows the web app to talk to our own site and the license server. Even a bug couldn't send your text somewhere else.
What does leave your computer
- The hushed text you choose to send goes to the AI company you're using, under its own privacy terms. It sees hashtags instead of the details Hushtag caught, and still sees anything Hushtag missed, so look before you send.
- Your license key, if you have a paid plan, goes to Lemon Squeezy about once a day to confirm it's valid. Never any text.
- Page views on our public website are counted by Cloudflare Web Analytics, without cookies. It never runs in the web app or the extension.