The fact sheet for your privacy officer.
Everything Hushtag does with data, on one page. Download the PDF to file with your privacy policies or attach it to a privacy impact assessment.
Where client text goes
Hushtag reads pasted text and files on the user's computer, swaps private details for hashtags, and lets the hushed copy go to the AI tool the user chose. The restore key stays in the browser and is deleted when the tab closes. We never receive text, files or keys.
Outside services
- Lemon Squeezy (a Stripe company): checkout, receipts and license checks. Receives the license key and an install ID; buyers' order details.
- Cloudflare: hosts the website and counts page views on public pages without cookies.
That's all. No analytics, ads or trackers in the extension or web app.
Stored on the computer
- Restore keys: browser session storage, cleared when the tab closes
- Settings and "Always hush" list: this browser only, not synced
- Usage counter: this browser only
- Locked keys: encrypted with the user's passphrase (AES-256-GCM)
Limits, plainly
Detection is a safety net, not a guarantee. ID, account and card numbers are caught very reliably; names are harder, so offices should add their client list and review what was hushed. The AI company still receives the rest of the text. Hushtag doesn't make an organization compliant with any law on its own.
Every browser permission, and why
| Permission | Why Hushtag needs it |
|---|---|
| Access to the AI chat sites it protects chatgpt.com, claude.ai, gemini.google.com, copilot.microsoft.com, copilot.com, m365.cloud.microsoft, perplexity.ai, chat.mistral.ai, chat.deepseek.com, grok.com | Catch a paste or drop into the chat box and hush it before the site receives it. |
| api.lemonsqueezy.com Our payment provider | Check that a paid license key is valid, about once a day. Only the key and an install ID are sent, never text. |
| storage This browser only | Keep each tab's restore key (deleted when the tab closes), your settings, your license status and the local usage counter. |
| scripting AI chat tabs only | Reconnect to AI tabs that were already open when Hushtag is installed or updated, so they are protected without a reload. |
| clipboardRead Only when you click | The "Paste from clipboard" button in the side panel, to restore an AI answer in one click. |
| sidePanel, contextMenus The Hushtag panel | The side panel where you restore answers, and the right-click "Restore with Hushtag" menu item. |
What's covered, and what isn't
Covered
- Google Chrome on Windows, Mac and ChromeOS
- Microsoft Edge, installing from the Chrome Web Store
- Microsoft Copilot in the browser: copilot.microsoft.com, copilot.com and Microsoft 365 Copilot Chat at m365.cloud.microsoft
- ChatGPT, Copilot, Claude, Gemini, Perplexity, Grok, DeepSeek and Mistral in the browser
- Phones and other browsers: the free web app hushes text and files to copy into any AI app
Not covered
- Copilot inside Word, Outlook, Excel or Teams, and the Windows Copilot app
- The ChatGPT, Copilot, Claude or Gemini desktop and phone apps (use the web app to hush first)
- Files attached directly in a chat (open them in the web app first)
- Firefox and Safari extensions
Alberta privacy laws
Most private-sector offices in Alberta are covered by the Personal Information Protection Act (PIPA). Health professionals such as physicians, dentists, dental hygienists, pharmacists, physiotherapists and optometrists are custodians under the Health Information Act (HIA) for the health information they hold. Both laws expect reasonable safeguards for personal information, and both have breach-notification duties.
Pasting a client's or patient's details into a consumer AI chat sends that information to a company outside your office, usually outside Canada. Hushtag reduces how much identifying information goes out. It doesn't replace your own policies, consent practices or, for HIA custodians, a privacy impact assessment where one is required. Talk to your privacy officer, your professional college or the Office of the Information and Privacy Commissioner of Alberta about your situation.