Sunda Privacy Guard

Redacts personal data on-device before it reaches ChatGPT or Claude, with optional reversible AES-256 pseudonymization.

Sunda Privacy Guard removes personal details from your files before you share them — and everything happens on your device. Nothing you protect is ever uploaded, logged, or sent to us. There is no us to send it to: no account, no backend, no telemetry. WHAT IT DOES Pick a file (Word .docx, .txt, or .md) and Sunda hands back a clean copy where every personal detail is replaced with a typed placeholder: "Dana Cohen (dana.cohen@example.com)" → "[PERSON_1] ([EMAIL_1])" The same value always gets the same placeholder within a document, so the result stays readable and consistent. Layout, headers, footers and footnotes in .docx files are preserved. WHAT IT DETECTS • Always-on rules (instant, work everywhere): email addresses, URLs, phone numbers (international + Israeli), credit-card numbers (Luhn-checked), IBANs, Israeli ID numbers (checksum-verified), and numeric dates. • Optional on-device AI model: names, addresses, and free-form dates too. One download (~900 MB, from Hugging Face), then it runs fully offline on your GPU via WebGPU. If your machine can't run it, the rule engine still protects you. REVERSIBLE WHEN YOU NEED IT Turn on reversible encryption (pseudonymization) and Sunda seals the placeholder mapping with AES-256-GCM into a token only you hold. Load the protected file and paste the token on the Restore page to rebuild the original — on your device, nowhere else. The encryption key is never stored and never transmitted. GUARD UPLOADS ON SITES YOU CHOOSE Add a site (for example chatgpt.com or drive.google.com) to "Protected sites" and Chrome will ask permission for that one site only. From then on, files you attach there are cleaned at the moment of upload using the always-on rules — instantly, with nothing waiting on a model. Sunda has no access to any other site, and it never reads or changes what you type. Remove a site and the access is gone. PRIVATE BY DESIGN • All detection and redaction runs on your device. • No telemetry, no analytics, no tracking — the code contains no such calls. • The extension talks to the network in exactly two cases: downloading the optional AI model from Hugging Face (a plain file download, nothing about you attached), and checking a Pro license key with our payment provider when you activate one. PRICING Every feature is available in a free 14-day trial. Continuing after the trial requires a Sunda Privacy Guard Pro license (purchased through our payment provider, LemonSqueezy). GOOD TO KNOW • Supported input: .docx, .txt, .md. PDF is not supported yet. • The optional AI model needs WebGPU (Chrome 138+); the rule engine works regardless. • Detection is never perfect — always glance over the protected copy before sharing something critical. Your files. Your details. Your call.