Privacy

Last updated: October 14, 2026

Hushtag is built so that we never receive your documents or the details in them. This page lists everything that does and doesn't leave your device.

Your documents and text

What Hushtag processes. When you open a file in the Hushtag app, or paste text into a supported AI chat site with the Hushtag extension, Hushtag reads that text on your device. It finds private details such as names, SIN/SSN and other ID numbers, account and card numbers, health numbers, email addresses, phone numbers, street addresses and land descriptions, and replaces them with tags like #PERSON_1 before the text reaches the site.

Where it stays. All detection, masking and restoring happens in your browser or on your phone. The word and name lists Hushtag uses are files that ship with the app; checking a document never needs the internet. Our website's security settings only allow the app to contact our own site and the license server described below, so even a bug couldn't send your text anywhere else.

The masked copy you send. When you paste the masked text into ChatGPT, Claude, Gemini, Copilot or another AI tool, that company receives it under its own privacy policy. It sees tags instead of the details Hushtag caught. It still sees the rest of the text, and anything Hushtag missed, so look over the highlights first.

Keys and settings

Restore keys. The key that matches tags to real details is kept in your browser. In the extension, it's held in session storage and deleted when the tab or browser closes. If you save a locked key, it's encrypted on your device with your passphrase (AES-256-GCM). We can't read it and can't recover a lost passphrase.

Settings. Your settings, including your "always mask" and client lists, are stored only in this browser on this computer (Chrome's local storage for the extension, the browser's local storage for the app). They aren't synced to your Google account or sent to us.

What does leave your device

Pro license check. If you activate Hushtag Pro, the app sends your license key and a device label (for example "Hushtag on Windows") to Lemon Squeezy, our payment provider, to confirm the license, then re-checks about once a day. No document text, names or keys are ever included.

Payments. Purchases are handled by Lemon Squeezy as merchant of record. They collect your name, email, card details and billing address to process payment and sales tax, under their own privacy policy. We see your order details, not your full card number.

Founding-member list. If you join the list on our website, we keep the email address and role you enter. Our web host, Netlify, stores it. We use it only to tell you when Hushtag Pro opens and about your founding offer. Reply to any email to be removed.

Website. hushtagprivacy.com is hosted by Netlify, which serves the site and keeps standard server logs (such as IP address and pages requested) for security. All fonts and code are served from our own site; we don't load anything from Google or other third parties.

What we collect from the app and extension. Nothing else. We use no analytics, advertising, tracking pixels or cookies.

Extension permissions

The extension asks for access to supported AI chat sites so it can catch pastes there, script access so it can reconnect to AI tabs that were already open when it updates, clipboard read so you can paste an AI answer into the side panel with one click, storage for keys and settings, and context menus for "Restore with Hushtag."

Limits and your rights

No detection tool is perfect, so review what you send. Hushtag helps you share less personal information, but it doesn't make you compliant with HIPAA, PIPEDA or other privacy laws on its own.

You can ask what information we hold about you (in practice, at most your founding-list email or order record), ask us to correct it, or ask us to delete it. Email us and we'll answer within 30 days.

Contact. shhh@hushtagprivacy.com