ShroudFox — redact before you send

ShroudFox removes personal information from what you type into Claude and ChatGPT, before the message leaves your browser. Names, phone numbers, email addresses, government identifiers and payment card numbers are replaced with numbered placeholders — [[PERSON_1]], [[PHONE_1]] — as the message is sent. You keep seeing the real values on screen and in anything you copy. The AI only ever receives the placeholders. Built for people who work with records they cannot paste into a third-party tool: teachers and school staff under FERPA, and anyone else holding information that belongs to somebody else. WHAT IT DOES • Redacts messages as they are sent, not after • Restores the real values in the replies, on screen and on copy • Redacts Word and Excel files before you attach them, keeping their formatting, and puts the real values back into what comes out • Shows you exactly what it replaced, message by message • Raises an alarm on itself if it ever stops working WHERE YOUR DATA GOES Your messages and files never leave your browser. Detection runs locally, and the mapping between placeholders and real values is stored in your browser and never transmitted — not to Claude, not to ChatGPT, not to us. The one thing that is sent: if you sign in for the paid features, your email address and a sign-in token go to ShroudFox's own accounts service to check whether your subscription is active. Nothing else. Use the free features and nothing is sent at all. Optional name detection downloads a model from Hugging Face and runs it locally. The model is downloaded to your machine; your text is never uploaded to it. HONEST LIMITATIONS • Names are only detected with the optional model switched on. Without it, structured information is caught and names are not. • Images are blocked rather than redacted — reading text from an image needs OCR, which is not included. • PDFs are not handled in the browser. • A redacted Word or Excel file is returned in its original format, but a file rebuilt from a reply is plain text. • It depends on how these sites work internally, and they change without notice. If that breaks redaction the extension tells you — it checks itself after every message — but check a payload yourself before trusting it with anything sensitive.