fix: PPI → PII across entire codebase + add Ko-fi support section

PII (Personally Identifiable Information) is the correct standard term.
Renamed all instances — comments, UI labels, variable names, function
names (autoDetectPPI → autoDetectPII, scanInputForPPI → scanInputForPII,
ppiWarnings → piiWarnings), CSS comments, README, and options page.

Added Ko-fi donation section to README and Options footer. Tone: no
obligation, no warranty, no influence on updates — just appreciation.

https://claude.ai/code/session_01KF4i7Ra7zCEDskxDBaNtcT

README.md

@@ -99,20 +99,20 @@ Go to **Options** → **Transfer Data** → **Import CSV / Password Export**.
 
 ### Document scanning
 
-When you upload files to an AI service, Silent Send extracts and scans the text for PPI before the file is sent:
+When you upload files to an AI service, Silent Send extracts and scans the text for PII before the file is sent:
 
 | Format | How it works |
 |---|---|
-| PDF | Text extracted from content streams, PPI substituted, uploaded as clean plaintext |
+| PDF | Text extracted from content streams, PII substituted, uploaded as clean plaintext |
-| DOCX, XLSX, PPTX | XML text extracted from ZIP structure, PPI substituted, uploaded as plaintext |
+| DOCX, XLSX, PPTX | XML text extracted from ZIP structure, PII substituted, uploaded as plaintext |
-| ODT, ODS, ODP | OpenDocument XML text extracted, PPI substituted |
+| ODT, ODS, ODP | OpenDocument XML text extracted, PII substituted |
 | DOC, XLS | Legacy binary format — readable text runs extracted |
 | RTF | Formatting stripped, text extracted |
 | TXT, CSV, JSON, code files | Direct string substitution |
 | Images (PNG, JPG, etc.) | Not scanned — no text to extract |
 | Scanned PDFs (image-only) | Not scanned — no text layer |
 
-For PDF/DOCX/XLSX uploads, a preview panel shows what PPI was found before uploading. You can choose to substitute and upload, or upload the original. Text files are substituted silently. The original file on your disk is never modified — substitution only happens to the in-flight upload.
+For PDF/DOCX/XLSX uploads, a preview panel shows what PII was found before uploading. You can choose to substitute and upload, or upload the original. Text files are substituted silently. The original file on your disk is never modified — substitution only happens to the in-flight upload.
 
 ## First-time setup
 
@@ -390,7 +390,7 @@ src/
     crypto.js           — AES-256-GCM encryption, PBKDF2 key derivation, TOTP (RFC 6238), WebAuthn, key caching
     sync.js             — Cross-browser sync with encryption (browser sync, Gist, folder, URL, sync codes)
     storage.js          — Browser storage wrapper with transparent at-rest encryption
-    auto-detect.js      — PPI pattern detection (IPs, addresses, paths, proper nouns)
+    auto-detect.js      — PII pattern detection (IPs, addresses, paths, proper nouns)
     document-scanner.js — PDF/DOCX/XLSX/ODT/RTF text extraction and scanning
     import-parser.js    — Bulk import from CSV, password managers, autofill exports
     version-history.js  — Sync version snapshots + rollback
@@ -427,7 +427,7 @@ For teams that want to enforce privacy rules across all members:
 1. **Admin** creates a JSON policy file hosted at any URL (static file, S3, cloud function)
 2. **Team members** join by entering the policy URL or an invite code in Options → Organization
 3. **Org rules merge** with personal rules — required mappings are always active and cannot be disabled
-4. **Compliance dashboard** shows which required fields are configured (without revealing actual PPI)
+4. **Compliance dashboard** shows which required fields are configured (without revealing actual PII)
 5. **Policy updates** are polled automatically (hourly)
 
 ### Org policy format
@@ -479,7 +479,7 @@ When you enable **sync encryption** (Options → Sync Between Browsers → Sync
 | TOTP secret | Authenticator app shared secret |
 | All sync data | Everything sent to Gist, sync folders, custom URLs, browser sync |
 
-**Only two things remain plaintext** — the encryption salt (needed to derive the key) and a verification blob (needed to check the password). Neither contains PPI.
+**Only two things remain plaintext** — the encryption salt (needed to derive the key) and a verification blob (needed to check the password). Neither contains PII.
 
 Without at-rest encryption, data is stored in plaintext in the browser's local storage (similar to cookies and localStorage). Anyone with file system access to your browser profile directory could read it.
 
@@ -561,3 +561,16 @@ The source code is available for inspection — you don't have to take our word
 [Business Source License 1.1](LICENSE) — free for personal, non-commercial use only. Commercial use is not permitted. The code converts to MIT on March 26, 2030.
 
 Contributions welcome. If you find a bug, especially a privacy-related one, please [open an issue](https://github.com/outis1one/silent-send/issues).
+
+## Support
+
+Silent Send is a weekend project — built because the developer wanted it and didn't look to see if something else already existed before building it with Claude. No donations needed. If you find it useful, great — enjoy. If it helps you keep your personally identifiable information private, that's thanks enough. More people having access to privacy is the goal.
+
+That said, Claude access isn't free. If you have a desire to give a coffee back, it would be appreciated — but don't feel any obligation to tip.
+
+**[Buy me a coffee on Ko-fi](https://ko-fi.com/YOUR_KOFI_USERNAME)**
+
+A few things to know:
+- Donations do not influence updates. Silent Send may or may not get updates based on the developer's usage and available time.
+- Donating does not create any warranty, support obligation, or expectation of future development.
+- This is and always will be a free, non-commercial project.

src/content/content.css

@@ -35,7 +35,7 @@
   border-radius: 2px;
 }
 
-/* Auto-detect PPI warning banner */
+/* Auto-detect PII warning banner */
 .ss-autodetect-warning {
   position: fixed;
   top: 16px;
@@ -136,7 +136,7 @@
   font-style: italic;
 }
 
-/* Pre-send PPI warning (spellcheck-style, appears while typing) */
+/* Pre-send PII warning (spellcheck-style, appears while typing) */
 .ss-presend-warning {
   position: fixed;
   top: 16px;

src/content/content.js

@@ -288,7 +288,7 @@
 
   // ============================================================
   // Combined substitution: smart patterns + explicit + auto-redact
-  // + auto-detect warning for unconfigured PPI
+  // + auto-detect warning for unconfigured PII
   // ============================================================
   function substituteAll(text) {
     const allReplacements = [];
@@ -309,12 +309,12 @@
       finalText = redacted.text;
     }
 
-    // 4. Auto-detect: scan the FINAL text for unconfigured PPI
+    // 4. Auto-detect: scan the FINAL text for unconfigured PII
     //    Auto-redact if enabled, otherwise just warn
     if (settings.autoDetect !== false) {
-      const warnings = autoDetectPPI(finalText, identity);
+      const warnings = autoDetectPII(finalText, identity);
       if (warnings.length > 0) {
-        // Auto-redact detected PPI in the outbound text
+        // Auto-redact detected PII in the outbound text
         if (settings.autoRedactDetected !== false) {
           for (let i = warnings.length - 1; i >= 0; i--) {
             const w = warnings[i];
@@ -343,9 +343,9 @@
   }
 
   // ============================================================
-  // Auto-Detect PPI Scanner (inline for page world)
+  // Auto-Detect PII Scanner (inline for page world)
   // ============================================================
-  const PPI_PATTERNS = [
+  const PII_PATTERNS = [
     // Network
     { name: 'Private IP', re: /\b(?:10\.\d{1,3}\.\d{1,3}\.\d{1,3}|172\.(?:1[6-9]|2\d|3[01])\.\d{1,3}\.\d{1,3}|192\.168\.\d{1,3}\.\d{1,3})\b/g,
       hint: 'Private IP address', cat: 'network' },
@@ -574,7 +574,7 @@
     });
   }
 
-  function autoDetectPPI(text, ident) {
+  function autoDetectPII(text, ident) {
     if (!text || text.length < 5) return [];
     const hasContext = CONTEXT_WORDS_RE.test(text);
 
@@ -590,7 +590,7 @@
     }
 
     const findings = [];
-    for (const pat of PPI_PATTERNS) {
+    for (const pat of PII_PATTERNS) {
       if (pat.contextRequired && !hasContext) continue;
       pat.re.lastIndex = 0;
       let m;
@@ -642,7 +642,7 @@
 
     safeHTML(warningEl, `
       <div class="ss-ad-header">
-        <strong>Silent Send detected potential PPI that may not be substituted:</strong>
+        <strong>Silent Send detected potential PII that may not be substituted:</strong>
         <button class="ss-ad-close">&times;</button>
       </div>
       ${items}
@@ -978,7 +978,7 @@
   // ============================================================
   // Document Upload Processing
   //
-  // Scans files in FormData uploads for PPI. Supports PDF, DOCX,
+  // Scans files in FormData uploads for PII. Supports PDF, DOCX,
   // XLSX, and text files. Shows preview for binary formats.
   // ============================================================
 
@@ -1050,8 +1050,8 @@
   }
 
   /**
-   * Scan a document file for PPI. Strategy: extract text from any
+   * Scan a document file for PII. Strategy: extract text from any
-   * format, substitute PPI, upload as plaintext. The AI extracts text
+   * format, substitute PII, upload as plaintext. The AI extracts text
    * from files anyway — no need to preserve formatting in a file
    * the user never gets back. Original stays untouched on disk.
    *
@@ -1308,7 +1308,7 @@
 
       safeHTML(docPreviewEl, `
         <div class="ss-dp-header">
-          <strong>PPI found in ${esc(filename)}</strong>
+          <strong>PII found in ${esc(filename)}</strong>
           <span class="ss-dp-count">${preview.replacementCount} item(s)</span>
         </div>
         <div class="ss-dp-note">${preview.note || ''}</div>
@@ -1745,7 +1745,7 @@
   }
 
   // ============================================================
-  // Pre-Send PPI Detection — scans as you type/paste (spellcheck style)
+  // Pre-Send PII Detection — scans as you type/paste (spellcheck style)
   // ============================================================
 
   // Generate obviously-fake values using reserved/standard ranges
@@ -1810,7 +1810,7 @@
 
     safeHTML(preSendWarningEl, `
       <div class="ss-ad-header">
-        <strong>Potential PPI detected — not yet configured:</strong>
+        <strong>Potential PII detected — not yet configured:</strong>
         <button class="ss-ad-close">&times;</button>
       </div>
       ${items}
@@ -1851,12 +1851,12 @@
         // Update local mappings so the fetch interceptor uses them immediately
         mappings = currentMappings;
 
-        // Replace the PPI value in the current input right now
+        // Replace the PII value in the current input right now
         if (inputEl) {
           replaceInInput(inputEl, real, fake);
-          // Re-scan — will dismiss warning if no more PPI remains
+          // Re-scan — will dismiss warning if no more PII remains
           if (inputScanTimer) clearTimeout(inputScanTimer);
-          inputScanTimer = setTimeout(() => scanInputForPPI(inputEl), 150);
+          inputScanTimer = setTimeout(() => scanInputForPII(inputEl), 150);
         }
 
         // Visual feedback
@@ -1879,7 +1879,7 @@
         // Re-scan to update warning
         if (inputEl) {
           if (inputScanTimer) clearTimeout(inputScanTimer);
-          inputScanTimer = setTimeout(() => scanInputForPPI(inputEl), 150);
+          inputScanTimer = setTimeout(() => scanInputForPII(inputEl), 150);
         }
       });
     });
@@ -1930,14 +1930,14 @@
   // Scan input on type and paste
   let inputScanTimer = null;
 
-  function scanInputForPPI(target) {
+  function scanInputForPII(target) {
     const text = target.textContent || target.value || '';
     if (!text || text.length < 5) {
       if (preSendWarningEl) preSendWarningEl.classList.remove('visible');
       return;
     }
 
-    const warnings = autoDetectPPI(text, identity);
+    const warnings = autoDetectPII(text, identity);
     if (warnings.length > 0) {
       showPreSendWarning(warnings, target);
     } else if (preSendWarningEl) {
@@ -1951,7 +1951,7 @@
     if (target.matches?.('[contenteditable], textarea, input[type="text"]')) {
       // Debounce — don't scan on every keystroke
       if (inputScanTimer) clearTimeout(inputScanTimer);
-      inputScanTimer = setTimeout(() => scanInputForPPI(target), 800);
+      inputScanTimer = setTimeout(() => scanInputForPII(target), 800);
     }
   }, true);
 
@@ -1961,7 +1961,7 @@
     if (target.matches?.('[contenteditable], textarea, input[type="text"]') ||
         target.closest?.('[contenteditable]')) {
       // Scan shortly after paste completes
-      setTimeout(() => scanInputForPPI(target.closest?.('[contenteditable]') || target), 200);
+      setTimeout(() => scanInputForPII(target.closest?.('[contenteditable]') || target), 200);
     }
   }, true);
 

src/lib/auto-detect.js

@@ -1,14 +1,14 @@
 /**
  * Silent Send - Auto-Detect
  *
- * Scans text for potential PPI that the user hasn't configured.
+ * Scans text for potential PII that the user hasn't configured.
  * This catches things the identity and auto-redact scanner can't —
  * because the user forgot or didn't know to configure them.
  *
  * Returns warnings (not auto-redactions) so the user can decide.
  */
 
-const PPI_PATTERNS = [
+const PII_PATTERNS = [
   // --- Network ---
   {
     name: 'Private IP Address',
@@ -21,7 +21,7 @@ const PPI_PATTERNS = [
     regex: /\b(?:(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\.){3}(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\b/g,
     category: 'network',
     hint: 'IP address — could identify your network',
-    // Exclude common non-PPI IPs
+    // Exclude common non-PII IPs
     exclude: /^(?:127\.0\.0\.1|0\.0\.0\.0|255\.255\.255\.\d+|8\.8\.[84]\.[84]|1\.1\.1\.1|1\.0\.0\.1)$/,
   },
   {
@@ -126,12 +126,12 @@ const PPI_PATTERNS = [
   },
 ];
 
-// Context words that make ambiguous patterns more likely to be PPI
+// Context words that make ambiguous patterns more likely to be PII
 const CONTEXT_WORDS = /\b(?:born|birthday|dob|birth|passport|license|driver|ssn|social\s*security|address|home|live|lives|reside|zip|postal)\b/i;
 
 const AutoDetect = {
   /**
-   * Scan text for potential unconfigured PPI.
+   * Scan text for potential unconfigured PII.
    * Pass in identity so we can skip values the user already configured.
    *
    * Returns array of { name, value, hint, category, index }
@@ -167,7 +167,7 @@ const AutoDetect = {
       }
     }
 
-    for (const pattern of PPI_PATTERNS) {
+    for (const pattern of PII_PATTERNS) {
       // Skip context-dependent patterns if no context words present
       if (pattern.contextRequired && !hasContext) continue;
 

src/lib/document-scanner.js

@@ -1,11 +1,11 @@
 /**
  * Silent Send - Document Scanner
  *
- * Scans uploaded documents for PPI and substitutes/redacts before
+ * Scans uploaded documents for PII and substitutes/redacts before
  * the file reaches the AI service.
  *
  * Supported formats:
- * - PDF: Extract text, scan for PPI, create sanitized plaintext version
+ * - PDF: Extract text, scan for PII, create sanitized plaintext version
  *   (PDFs can't be reliably edited in-place without breaking layout)
  * - DOCX: Parse XML, find-replace text, repackage ZIP (layout preserved)
  * - XLSX: Parse cells, find-replace values, repackage (formatting preserved)
@@ -13,7 +13,7 @@
  *
  * Modes:
  * - Silent: substitute and upload (default for text files)
- * - Preview: show PPI findings, let user confirm before upload (default for PDF/DOCX/XLSX)
+ * - Preview: show PII findings, let user confirm before upload (default for PDF/DOCX/XLSX)
  *
  * Integration:
  * - The fetch interceptor in content.js detects multipart/form-data uploads
@@ -70,9 +70,9 @@ const DocumentScanner = {
   },
 
   /**
-   * PDF: extract text, scan for PPI, create sanitized text file.
+   * PDF: extract text, scan for PII, create sanitized text file.
    * PDFs can't be reliably edited in-place, so we extract text,
-   * substitute PPI, and send the clean text instead.
+   * substitute PII, and send the clean text instead.
    */
   async _processPDF(file, filename, substituteAll, options) {
     const text = await this._extractPDFText(file);

src/lib/org-policy.js

@@ -12,7 +12,7 @@
  * - Policy updates are applied automatically
  *
  * Privacy: the org admin can check compliance (are required fields
- * configured?) but CANNOT see individual PPI values.
+ * configured?) but CANNOT see individual PII values.
  */
 
 import api from './browser-polyfill.js';
@@ -220,7 +220,7 @@ const OrgPolicy = {
 
   /**
    * Check if the user's configuration meets org policy requirements.
-   * Returns compliance status WITHOUT revealing actual PPI values.
+   * Returns compliance status WITHOUT revealing actual PII values.
    *
    * @returns {{ compliant: boolean, missing: string[], configured: string[] }}
    */

src/lib/storage.js

@@ -23,7 +23,7 @@ const KEYS = {
   SETTINGS: 'ss_settings',
 };
 
-// Keys that contain sensitive PPI and should be encrypted at rest
+// Keys that contain sensitive PII and should be encrypted at rest
 // All user data keys are encrypted at rest — settings included since
 // custom domains and configuration can reveal what services the user
 // accesses. Only ss_sync_encryption (salt, verification blob) and

src/options/options.html

@@ -90,8 +90,8 @@
       </div>
       <div class="setting-row">
         <div>
-          <label>Auto-redact detected PPI on send</label>
+          <label>Auto-redact detected PII on send</label>
-          <p class="setting-desc">Automatically replace detected PPI with generic placeholders (192.0.2.1, 123 Example Street, etc.) when sending</p>
+          <p class="setting-desc">Automatically replace detected PII with generic placeholders (192.0.2.1, 123 Example Street, etc.) when sending</p>
         </div>
         <label class="toggle">
           <input type="checkbox" id="autoRedactDetected" checked>
@@ -100,8 +100,8 @@
       </div>
       <div class="setting-row">
         <div>
-          <label>Offer to auto-add detected PPI</label>
+          <label>Offer to auto-add detected PII</label>
-          <p class="setting-desc">Show a + button on detected PPI to instantly create a mapping with a suggested fake value</p>
+          <p class="setting-desc">Show a + button on detected PII to instantly create a mapping with a suggested fake value</p>
         </div>
         <label class="toggle">
           <input type="checkbox" id="autoAddDetected" checked>
@@ -633,6 +633,10 @@
       <p style="font-size:11px;color:#9ca3af;margin-top:6px;max-width:600px">
         Silent Send is a convenience tool, not a security guarantee. Third-party sites may change how they send data at any time, which can cause missed substitutions without warning. You are responsible for verifying your data before sending. See the <a href="https://github.com/outis1one/silent-send/blob/main/LICENSE" target="_blank" style="color:#6b7280">LICENSE</a> for full terms.
       </p>
+      <p style="font-size:11px;color:#9ca3af;margin-top:8px">
+        Find Silent Send useful? No obligation, but if you'd like to help keep it going:
+        <a href="https://ko-fi.com/YOUR_KOFI_USERNAME" target="_blank" style="color:#6b7280">Buy me a coffee</a>
+      </p>
     </footer>
   </div>
 

src/popup/popup.html

@@ -206,7 +206,7 @@
 
       <div class="setting-item">
         <div class="setting-label">
-          <strong>Auto-detect PPI</strong>
+          <strong>Auto-detect PII</strong>
           <span class="setting-desc">Warn about unconfigured personal data (IPs, addresses, paths)</span>
         </div>
         <label class="toggle"><input type="checkbox" id="optAutoDetect" checked><span class="toggle-slider"></span></label>
@@ -214,8 +214,8 @@
 
       <div class="setting-item">
         <div class="setting-label">
-          <strong>Auto-redact detected PPI</strong>
+          <strong>Auto-redact detected PII</strong>
-          <span class="setting-desc">Replace detected PPI with placeholders on send</span>
+          <span class="setting-desc">Replace detected PII with placeholders on send</span>
         </div>
         <label class="toggle"><input type="checkbox" id="optAutoRedact" checked><span class="toggle-slider"></span></label>
       </div>
@@ -231,7 +231,7 @@
       <div class="setting-item">
         <div class="setting-label">
           <strong>Document scan preview</strong>
-          <span class="setting-desc">Show PPI findings before uploading documents</span>
+          <span class="setting-desc">Show PII findings before uploading documents</span>
         </div>
         <label class="toggle"><input type="checkbox" id="optDocPreview" checked><span class="toggle-slider"></span></label>
       </div>
@@ -264,7 +264,7 @@
       </div>
       <div class="privacy-note" style="color:#b45309;background:#fef3c7;padding:6px 8px;border-radius:4px;margin-bottom:6px">
         Silent Send is a convenience tool, not a security guarantee. It reduces
-        but cannot eliminate the risk of sharing personal data. It may miss PPI
+        but cannot eliminate the risk of sharing personal data. It may miss PII
         in images, unusual formats, or data you haven't configured. Third-party
         sites may change how they send data at any time, which can cause missed
         substitutions without warning. Always verify sensitive messages before

src/popup/popup.js

@@ -758,20 +758,20 @@ function renderTestDiff() {
   if (redactCount > 0) parts.push(`${redactCount} auto-redacted`);
   if (warnCount > 0) parts.push(`${warnCount} warnings`);
 
-  // Auto-detect unconfigured PPI in the final text
+  // Auto-detect unconfigured PII in the final text
-  const ppiWarnings = AutoDetect.scan(finalText, identity);
+  const piiWarnings = AutoDetect.scan(finalText, identity);
-  if (ppiWarnings.length > 0) parts.push(`${ppiWarnings.length} PPI detected`);
+  if (piiWarnings.length > 0) parts.push(`${piiWarnings.length} PII detected`);
 
   stats.textContent = `${allReplacements.length} substitution${allReplacements.length !== 1 ? 's' : ''} (${parts.join(', ')})`;
 
-  // Show PPI warnings below stats
+  // Show PII warnings below stats
-  if (ppiWarnings.length > 0) {
+  if (piiWarnings.length > 0) {
-    const ppiDiv = document.createElement('div');
+    const piiDiv = document.createElement('div');
-    safeHTML(ppiDiv, `<div style="margin-top:6px;padding:6px 8px;background:#fef3c7;border-radius:4px;color:#92400e;font-size:11px">
+    safeHTML(piiDiv, `<div style="margin-top:6px;padding:6px 8px;background:#fef3c7;border-radius:4px;color:#92400e;font-size:11px">
-      <strong>Unconfigured PPI detected:</strong>
+      <strong>Unconfigured PII detected:</strong>
-      ${ppiWarnings.map(w => `<div style="margin-top:3px"><code style="background:#fff;padding:1px 4px;border-radius:2px;color:#b45309">${escapeHtml(w.value)}</code> — ${w.hint}</div>`).join('')}
+      ${piiWarnings.map(w => `<div style="margin-top:3px"><code style="background:#fff;padding:1px 4px;border-radius:2px;color:#b45309">${escapeHtml(w.value)}</code> — ${w.hint}</div>`).join('')}
     </div>`);
-    stats.appendChild(ppiDiv);
+    stats.appendChild(piiDiv);
   }
 }