Browser Extension

Install Redacta in your browser

Stop PII from reaching Claude, ChatGPT, and Gemini — without changing a single habit. The extension redacts everything you type or upload before it leaves the tab.

Where to install

Chrome

Pending review

While the store review is in flight, Business customers can sideload the signed .zip today.

Signed build available on request

Firefox

Pending review

Signed .xpi available for direct install.

Signed build available on request

Edge

Pending review

Uses the Chrome build — same install instructions.

Signed build available on request

Safari

Pending App Review

Distributed via Apple App Store when approved. macOS 12+ / iOS 16.4+.

Signed build available on request

If you need the signed .zip / .xpi before public approval lands, email support@getredacta.com from a work address and we'll send you the build.

After install

  1. 1

    Pin the Redacta icon

    Click the puzzle icon in your toolbar and pin Redacta — you'll want the status popup one click away.

  2. 2

    (Optional) Paste your API key

    Open the popup and paste a key from your Redacta dashboard. With a key, the extension reports anonymized redaction counts to your account dashboard; without one, it still redacts locally, it just doesn't sync counts. No message or file content is ever sent.

  3. 3

    Visit a supported site

    Open claude.ai, chatgpt.com, chat.openai.com, or gemini.google.com. You'll see a small Redacta badge in the bottom-right of the page confirming the extension is active.

  4. 4

    Type or paste normally

    Anything matching a PII pattern is swapped for a token before the message reaches the AI. A toast shows how many entities were redacted. Responses are unchanged.

  5. 5

    Try a file upload

    Drag a .txt, .csv, .log, .json, .py, .env, .sql or similar file onto the composer. If it contains PII, the extension substitutes a sanitized version before upload. Images and PDFs pass through unchanged.

How it works

The extension injects a content script into a small, fixed list of supported sites. When you press Enter in the composer, or drop a file onto it, the script scans the payload locally with the same regex + checksum library Redacta uses on the server-side proxy. Matching entities are replaced with deterministic tokens like [EMAIL_a7f3b1c9] before the send event fires. The AI sees the tokens; you see the real values in its response.

Nothing ever leaves your machine by default. Detection is 100% local. If you add your Redacta API key in the popup, the extension sends anonymized metadata — entity types and counts, never content — to your own dashboard so you can see where redactions are happening.

Supported sites

  • claude.ai
  • chatgpt.com
  • chat.openai.com
  • gemini.google.com

Entities detected

  • Names (NER)
  • Email addresses
  • Phone numbers
  • SSNs
  • Credit cards (Luhn-checked)
  • Bank account + routing numbers
  • US street addresses
  • IP addresses (v4 & v6)
  • AWS access keys & ARNs
  • OpenAI / Anthropic / GitHub / Slack API keys
  • JWTs & bearer tokens
  • Private keys (PEM)
  • Passwords in config files
  • Database connection strings

Quota & billing

Extension redactions share your plan quota with the API proxy and document scanner — one counter across all three surfaces. Free users get 25 redactions/month; paid plans get 300 to 5,000. Go over and paid plans bill per-redaction overage rather than hard-cutting.

See pricing

Privacy promise

  • Detection runs locally in your browser using regular expressions — no remote inference.
  • Message text and file content are never transmitted to Redacta.
  • No remote JS, WASM, or dynamic eval — every file shipped in the extension is exactly the file in our public source repo.
  • Opt-in reporting sends only counts and entity types (e.g., { "EMAIL": 2 }) — never the redacted or original values.

Details in our privacy policy, section 9a.

Troubleshooting

The Redacta badge doesn't appear

Refresh the page. The content script runs on document_idle, so on a slow page it may take a couple of seconds to inject. If it still doesn't appear, confirm the extension is enabled and that the site is one of the four we support.

Redaction didn't trigger on my message

Double-check that the text actually matches a known PII pattern — the extension deliberately doesn't flag names unless our NER is confident. Try pasting in an email address or a well-formed SSN as a sanity check. If those work and your original didn't, the pattern is a documented gap; please report it to support@getredacta.com.

Site broke after an AI provider redesign

Chat sites change their DOM frequently. If Claude, ChatGPT, or Gemini update their composer and our send-key interception stops working, you'll see a notice in the badge. Email support and we'll ship an update — usually same-day.

I'm an enterprise admin — how do I push this out?

See the MDM deployment guide. It covers Chrome Enterprise policy, Microsoft Intune, Edge Administrative Templates, and macOS configuration profiles, plus how to pre-configure the API key so users never have to type it.

What the extension does NOT do

It only protects the four supported sites listed above. It does not redact data on Microsoft Copilot, Perplexity, Mistral's chat, or any site we haven't explicitly added. If you need coverage for those, use the Redacta API proxy in any tool that lets you set a custom base URL, or contact us about adding your provider to the extension's supported list.

Need to deploy to a team?

MDM, Chrome Enterprise, Intune, and macOS profiles — covered in a single deployment guide.

Enterprise deployment