BiVelio Shield — private prompts for ChatGPT & Claude

Use ChatGPT & Claude privately. Redacts your data locally before it leaves your browser, then restores it in the reply. Free.

BiVelio Shield is a privacy tool: it finds sensitive values in what a person types and replaces them before the message reaches the AI provider. On the free tier all of that happens on the user's own device and the extension makes no network request of its own at all. Six categories are declared because of one enterprise-only route, and because of what that route sends. When an organisation's Chrome administrator sets a gateway address in the central managed policy (the `gatewayUrl` key of managed_schema.json), the extension sends the text of a message to THAT administrator-chosen address to locate personal names — and it sends it AS TYPED, BEFORE the local redaction runs. That is the honest description: what travels is not a names query, it is the user's message intact, so anything in it travels with it. The extension's own detectors show what that can be: health and religion terms, card numbers and IBANs, API keys and password-shaped strings, coordinates and IP addresses. We declare those categories rather than argue that a free-text field usually contains none of them. What comes back are the positions of what the gateway found, and the matching text for each, which the browser uses to verify those positions against the message it already holds. Nothing is stored at the far end. The cap is 4,000 characters per inspected value. In ChatGPT the same lookup also fires on PASTE, for pasted text of between 1,000 and 4,000 characters, at the moment of the paste and before any message is sent; Claude and Gemini have no such listener. This route is OFF unless an administrator configures it — the policy value is absent by default, a personal install has no managed policy at all — and it additionally requires a valid paid licence, so the free tier never calls it. The address is chosen by that administrator; it is expected to be the organisation's own self-hosted BiVelio Privacy Gateway, or a service BiVelio operates for that organisation under a signed Art. 28 data-processing agreement. Nothing in the extension restricts it further than "an https address". Also transmitted, on paid plans only, to licensing.bivelio.com: a signed licence token with a random per-install device id, for seat enforcement, every 12 hours; and an hourly report of value-free counts — how many values of each family were kept out, how many sends were blocked — each row carrying a Unix timestamp that the ledger floors to the hour on arrival. No prompt text, no values, no name, no email, no user id, and nothing recording which chat, thread or provider.