Files

T

Claude f237139e80 legal: strengthen disclaimer, liability, and warranty language

- LICENSE: expanded warranty disclaimer covering silent failures from
  third-party changes, coverage gaps, regulatory non-compliance, and
  commercial licensee expectations. Explicit limitation of liability
  for privacy breaches, identity theft, and regulatory penalties.
- PRIVACY.md: added limitations section covering third-party changes,
  coverage gaps, user responsibility, and compliance disclaimer.
- README.md: detailed disclaimer with specific scenarios — site API
  changes, coverage gaps, user verification responsibility, and
  commercial license scope.
- Popup: expanded footer warning about third-party changes and user
  responsibility.
- Options page: added footer disclaimer with LICENSE link, updated
  version to 0.9.0.

https://claude.ai/code/session_01KF4i7Ra7zCEDskxDBaNtcT

2026-03-28 15:30:45 +00:00

4.8 KiB

Raw Blame History

Privacy Policy — Silent Send

Last updated: March 26, 2026

Summary

Silent Send does not collect, transmit, or store any data externally. All processing happens 100% locally in your browser. There are no servers, no analytics, no tracking, and no telemetry of any kind.

What data Silent Send accesses

Silent Send accesses the following data only within your browser to perform its core function (substituting personal information before it reaches AI services):

Text you type in AI chat interfaces (Claude, ChatGPT, Grok, Gemini, etc.) — scanned for configured personal information and substituted before sending
Files you upload to AI services — text is extracted and scanned for personal information before upload
Your identity configuration — names, emails, usernames, hostnames, phones, and their substitute values, stored in browser local storage
Your substitution mappings — real-to-substitute value pairs you configure
Activity log — a local record of substitutions performed (never sent anywhere)
Settings and preferences — extension configuration

Where data is stored

All data is stored in your browser's storage.local (the extension's private storage area). When at-rest encryption is enabled, all sensitive data is AES-256-GCM encrypted before being written to storage.

Data is never sent to any server operated by Silent Send or any third party. The only network requests Silent Send makes are:

To the AI service you are already using (e.g., claude.ai, chatgpt.com) — this is the substituted/sanitized version of your text, not the original
GitHub Gist sync (optional, user-initiated) — if you configure Gist sync, your encrypted settings are stored in a private Gist on your own GitHub account
Custom URL sync (optional, user-initiated) — if you configure a custom sync endpoint, encrypted settings are sent to the URL you specify
Org policy URL (optional) — if you join an organization, the extension fetches the policy JSON from the URL your admin provides

Silent Send does not share any data with anyone. There are no analytics providers, no crash reporting services, no advertising networks, and no data brokers involved.

Data retention

All data persists in your browser until you delete it. You can:

Clear all data via Options → Danger Zone → Reset Everything
Uninstall the extension (removes all stored data)
Export your data before clearing

Permissions explained

Permission	Why it's needed
`storage`	Store your identity, mappings, settings, and activity log locally
`activeTab`	Access the current tab to inject the substitution script
`scripting`	Inject content scripts on custom domains you configure
`notifications`	Show desktop notifications for sync status updates
`alarms`	Background polling for auto-sync and org policy updates
Host permissions (claude.ai, etc.)	Intercept API requests to substitute personal information before sending

Children's privacy

Silent Send does not knowingly collect data from children under 13. The extension does not collect data from anyone — it processes everything locally.

Changes to this policy

If this privacy policy changes, the updated version will be posted at this URL and in the extension's GitHub repository.

Contact

For questions about this privacy policy, open an issue at: https://github.com/outis1one/silent-send/issues

Limitations and disclaimer

Silent Send is a convenience tool that reduces the risk of sharing personal information with third-party services. It does not guarantee complete protection. Specifically:

Third-party changes: Websites may change their APIs, interfaces, or data submission methods at any time. Such changes can cause Silent Send to stop intercepting or substituting data without any visible error. Silent Send contributors have no control over third-party websites and accept no responsibility for changes they make.
Coverage gaps: Silent Send may not detect personal information in images, unusual text formats, non-standard encodings, dynamically generated content, or patterns not covered by built-in or custom rules.
User responsibility: You are responsible for verifying that substitutions are applied correctly before transmitting sensitive data. The extension provides a Test tab for this purpose.
Not a compliance tool: Silent Send does not guarantee compliance with any privacy regulation (GDPR, HIPAA, CCPA, PCI-DSS, or otherwise). Organizations requiring regulatory compliance should implement appropriate professional tooling and processes.

For the full limitation of liability, see the LICENSE file.

Open source

Silent Send's source code is publicly available at https://github.com/outis1one/silent-send — you can verify every claim in this policy by reading the code.

4.8 KiB Raw Blame History