Guarded Genius: Data Usage and Privacy

When enabled, Guarded Genius reads the text you type into the ChatGPT composer, and the responses ChatGPT sends back, in order to:

• Detect PII (names, organizations, locations, emails, phone numbers, dates, ages, Social Security numbers, credit card numbers, and any custom rules you configure)
• Replace detected PII with anonymous placeholder tokens (e.g. [EMAIL_xxxx]) before your message is sent
• Store the mapping between tokens and original values on your device, scoped per conversation, so tokens can be restored to their real values for your own viewing. These mappings persist in local storage, which is also what the audit log export reads from, until you clear extension storage.

• Guarded Genius does not collect, store, or transmit your message text, your PII, or your conversations to servers operated by Intuz or any third party.
• When you send a message, the masked message (with placeholder tokens instead of detected PII) is sent to ChatGPT as part of your normal chat session, the same as any message you’d send without Guarded Genius. If you choose to unmask items in preview mode before sending, those unmasked values may be included in what is sent to ChatGPT.
• Guarded Genius does not include analytics, telemetry, or tracking of any kind.
• Guarded Genius does not sell, rent, or share any data with third parties.
• All PII detection, token restoration, and conversation viewing happen entirely on your device. Nothing described in this section involves a network request to Intuz or any third party.

To reliably restore your original values, including in long conversations where older messages are loaded gradually, Guarded Genius reads the conversation data ChatGPT’s own web app already loads into your browser as you use it. It does this in two ways:

• It observes ChatGPT’s own network responses for your conversation data as your browser loads them (it does not make any network requests of its own, and it does not modify what is sent to or received from ChatGPT).
• If that data isn’t available, it falls back to reading the visible conversation text directly from the ChatGPT page.

Either way, this data stays in your browser’s memory and local storage and is used only to restore your own tokens back to their original values for display to you. It is never transmitted anywhere.

Guarded Genius includes an optional viewer that shows your conversation with all detected PII restored to its original values, for your own reference.

• How it opens: A button appears next to the ChatGPT composer in conversations where PII has been detected. Clicking it opens the viewer in a new browser tab.
• What it shows: Your conversation, with masked tokens (e.g. [EMAIL_xxxx]) restored to their real values, displayed as color-coded highlights you can toggle between “unmasked” and “raw token” view.
• Where the data lives: The viewer’s content is generated and held only in your browser, in local and session storage, and is never uploaded or synced anywhere. Closing the viewer tab does not delete it. It stays until you open the viewer again, which overwrites it with the latest transcript, or until you clear the extension’s storage or uninstall Guarded Genius.
• Print / export: The viewer supports printing or saving a transcript as a PDF using your browser’s own print function. Like the audit log export below, any file you create this way contains unmasked personal data and is your responsibility to store and share securely once created.

On new ChatGPT conversations, Guarded Genius may display a subtle visual indicator (a badge and border near the composer) showing that PII protection is active. This is a visual-only feature. It does not read, log, or store anything beyond what’s needed to know whether protection is currently enabled, and does not interfere with typing or normal use of ChatGPT.

• Settings and custom detection rules are stored locally using Chrome’s storage.local API and never leave your device.
• Token-to-value mappings for each conversation are stored in Chrome’s storage.local API, scoped to your browser profile, and persist there until you clear extension storage. A temporary conversation identifier may also be stored in sessionStorage for new chats until ChatGPT assigns a conversation ID.
• Viewer transcripts (used to display your unmasked conversation) are stored in Chrome’s storage.local and storage.session APIs, scoped to your browser profile. The most recent transcript persists there until it is overwritten by a new one, or until you clear extension storage or uninstall Guarded Genius.
• None of the above is transmitted off your device. You can clear this data at any time by removing the extension or clearing your browser’s extension storage.

Guarded Genius includes a bundled on-device named-entity-recognition model (Xenova/bert-base-NER) as part of the extension package. This model detects names, organizations, and locations in your text. It is loaded entirely from files packaged with the extension. Guarded Genius does not download this model, or any other file, from the internet at any point.

Guarded Genius’s popup includes an optional Download audit log button. This lets you export a CSV file listing the masked tokens generated during your sessions alongside their original, unmasked values.

• This file is generated entirely on your device, only when you click the button, never automatically.
• The CSV is built directly from the token mappings already stored locally; nothing is fetched from a server to build it.
• Guarded Genius does not transmit this file anywhere; it is saved to your computer like any other browser download.
• Because this file contains your original, unmasked personal data in plain text, you are responsible for storing and sharing it securely once downloaded.

Guarded Genius requests the following browser permissions and access:

• storage: to save your settings, custom detection rules, local token-to-value mappings, and viewer transcripts on your device
• offscreen: to run on-device ML/regex detection off the main UI thread, without blocking the browser
• Host access to chatgpt.com: to read the composer text and ChatGPT’s own conversation data, intercept the send action, mask PII before sending, restore token values for your own viewing, and open the Guarded Genius viewer

Guarded Genius’s popup also includes a link to intuz.com for support and customization requests. This link only opens in a new browser tab when clicked. No data is sent automatically as part of that action.

Questions about Guarded Genius’s data practices: https://www.intuz.com/get-started/