Sidecar Sieve — Privacy Policy
Last updated: 12 September 2026
Summary
Sidecar Sieve does not collect, transmit, store, or share the text you type. All text analysis happens on your own device. The only information that ever leaves your device is a small, non-identifying record sent if you uninstall the extension, described in full below.
What the extension does
Sidecar Sieve scans text you type into supported AI chat sites (ChatGPT, Claude, Gemini) before you send it, and flags patterns that look like personal information or credentials. You decide what, if anything, to remove before sending.
Data handling
Text you type is never transmitted. Analysis runs entirely within your browser, using pattern matching and a detection model that runs locally on your device. No text you type is sent to any server operated by us or by anyone else as part of this extension's operation.
No analytics, no telemetry, no tracking while the extension is running. The extension does not record what you type, what it detects, or anything about you. It does not track your usage while installed.
No accounts. The extension does not ask for or use any login.
Network requests
While the extension is running, it makes network requests in exactly one circumstance: the first time it runs, it downloads its detection model files from huggingface.co. These files are verified against a fixed cryptographic hash before use and then cached in your browser. No text you type is included in this request.
After that download, the extension makes no further network requests while it is running.
If you uninstall the extension
When you remove Sidecar Sieve, Chrome opens a short feedback page. Opening that page sends the following to a server we operate:
- the extension version
- how many days the extension was installed
- whether you ever completed a redaction
That is all. It does not include any identifier, any account, your IP address in any stored form, anything you typed, anything the extension detected, or which sites you used it on. There is no way to link this record to you or to any other record.
The feedback page itself asks one optional multiple-choice question and offers an optional free-text box. It requires no email address, no account, and no personal details. You can close the page without answering, and nothing further is sent.
This information is stored in a database we operate, hosted with Supabase in Sydney, Australia. It is used only to understand why people stop using the extension.
Local storage
The extension stores your own settings — which sites it is enabled on, and which review mode you prefer — in your browser's local extension storage. This never leaves your device and is removed when you uninstall.
Permissions
- offscreen — runs the detection model in an isolated document, separate from the pages you visit
- storage — saves your settings, as above
- scripting — turns on protection in chat tabs you already had open when you installed the extension
- chatgpt.com, claude.ai, gemini.google.com host access — the three chat sites the extension runs on
- huggingface.co and hf.co host access — the one-time model download described above. The download redirects to a hf.co subdomain, so both origins are required.
The extension does not request access to your browsing history, your bookmarks, your identity, or any site other than the supported chat sites it runs on.
Changes
Any change to this policy will be published at this address, with the date above updated.