Browser Extension Anonymizes Sensitive Data Before Sending to AI Chatbots

A new browser extension automatically detects and replaces sensitive information such as names, INN numbers, bank cards, and emails with pseudonyms before any text or files reach AI chat services. The tool operates entirely locally in the browser, ensuring original data never leaves the user's device while allowing AI models to process anonymized placeholders. Responses from the AI are decrypted back to readable form only on the user's screen using an in-memory mapping that disappears when the browser closes. The solution supports over 70 file formats including DOCX, XLSX, and PDF, plus offline OCR for scanned documents to handle the most common leakage vectors used by HR, legal, and accounting teams. Multiple validation layers including checksums, Luhn algorithm, entropy checks, and normalization for Russian name declensions reduce false positives that plagued earlier regex-based attempts. The extension is available in a free version on the Chrome Web Store covering 33 data categories, with advanced file and scan features offered on request.

HabrTranslated from Russian

Read at source

A new browser extension has been developed to solve the growing problem of sensitive data leaking into AI chat services through everyday work tasks.

HR specialists, lawyers, accountants, and IT staff routinely paste resumes, contracts, payroll tables, and configuration files containing personal data, bank details, and passwords directly into AI prompts. Once sent, this information remains on third-party servers with no reliable way to delete it from logs or training datasets.

The extension intercepts messages and file uploads at the moment of sending, replaces detected sensitive values with unique pseudonyms such as [user_qhb6tm] or [card_348zsg], and forwards only the masked text to the AI. When the AI replies using the same placeholders, the extension instantly restores the original values on the user's screen while the server sees only the anonymized version.

Earlier approaches proved insufficient. Manual replacement quickly failed due to user fatigue. Simple regex scripts struggled with Russian grammar, false positives on invoice numbers, and inconsistent name formats. External anonymization services merely shifted the trust problem to another third party.

The final solution meets three strict requirements: fully automatic operation without user intervention, completely local processing with no internet required after installation, and seamless integration that does not change how people interact with their preferred AI chat interface.

Inside the engine, 33 data categories are defined declaratively with patterns, validators, and priorities. INN numbers are verified using FNS checksum algorithms, cards use the Luhn check, and passwords are filtered by entropy and stop-word lists. Russian names are normalized to nominative case so that declined forms receive the same pseudonym. The response parser tolerates case changes, spaces, markdown, and homoglyphs to ensure reliable decoding even when models alter labels.

File support includes more than 70 formats. Office documents are processed by creating anonymized copies that preserve formatting, tables, and headers. Scanned PDFs and photos are handled by a local offline OCR engine that runs in a single worker thread, keeping memory usage low and the system responsive.

A free version covering all text categories and custom rules is available in the Chrome Web Store. Advanced features for files, scans, and enterprise policy distribution are provided upon request.

Meridian digestThe week's most consequential security stories, distilled into one briefing.See the digest

More in Privacy & Surveillance

Maximizing iPhone Privacy: Essential Settings to Enable, Disable, and Verify Immediately
Top 10 Secure DNS Servers for Privacy, Threat Blocking and Ad Filtering in 2026
WebRTC IP Leaks Explained: Why Disabling the Protocol Harms Anonymity in Anti-Detect Browsers