A local browser extension. On AI chats, it catches API keys, passwords, and private URLs before you press send. Anywhere else, the Visual Redactor redacts elements, text, or any screen region — for the moments you're about to screenshot or share a screen.
100% local. Your prompts never leave your browser.
Coverage varies a little by browser. And you can add any other AI site yourself — more below.
Many prompt scanners ship your text to a server first. Redactopia doesn't. The scan happens on your machine, runs in the same instant you press send, and never leaves the page.
See the privacy details →Three small steps. All of them in your browser.
Redactopia watches the composer as you write. No interruptions, no slowdown.
Risky bits get outlined right in your prompt as you type, with a running count in the corner. Try to send with something sensitive still there and a warning steps in before it leaves.
Redact each match to a clear label, edit yourself, or send the original anyway. Always your call.
[EMAIL_1], [EMAIL_2] — so it can still tell two people apart while the real data stays with you.Labels protect the data. Coded protects it and keeps the two people distinct — so the AI still reasons, while the originals never leave your machine.
Built-in detection categories, each one a pattern with a validator where it matters. And if those don't cover what you need, add your own in the Custom Patterns card.
eyJhbGciOiJIUzI1NiJ9…
sk_live_… · ghp_… · xoxb-…
AKIAIOSFODNN7EXAMPLE
-----BEGIN … PRIVATE KEY-----
password=… · pass: …
https://u:p@host/…
4242 4242 4242 4242
123-45-6789
postgresql://u:p@host/db
MTIz….GcXx.abc…
AB 12 34 56 C · 123-456-789
0x52908400… · bc1qw508d6… · 1BvBMSEY…
DE89 3704 0044 0532 0130 00
routing number: 021000021
https://hooks.slack.com/services/T…/B…/XXXX
user@host.tld
(555) 123-4567
+44 7911 123456
192.168.1.1 · 10.0.0.50
staging.internal
Long random-looking values near “token”, “key”, “secret”
arn:aws:iam::123456789012:user/Bob
Every pattern above — including API keys, entropy-based secrets, and database credentials — is detected for free. No paywall, no account, no upgrade required.
Checks happen the instant you press send. You always get a chance to catch leaks before they leave the page.
Active by defaultTurn protection off on one site without touching the others. Settings save automatically; nothing global to remember to switch back.
The Visual Redactor redacts any element, text, or screen region. One permission upfront, no per-site prompts. Redactions persist across reloads.
No background access to unrelated tabs. AI-chat protection runs only on sites Redactopia ships with or ones you add.
Free forever for the protection that matters. Pro lifts the limits for power users.
The questions we hear most. Short answers.
No. The scan runs entirely in your browser. Your prompts aren't sent to us, aren't stored anywhere, aren't shared with anyone. The only network request the extension ever makes is an optional Pro license check, and it never includes your prompts.
Chrome and Edge are both first-class and nearly identical. There's one Chrome-only AI site; the Copilot question below covers why. Firefox isn't supported yet — it uses a different extension API, so it needs its own build, which we haven't shipped. It's on the roadmap, with no firm date yet.
Add them yourself. Open the side panel → Custom AI sites → type a hostname. If the Visual Redactor is on, the broad permission already covers it and no extra prompt appears. If it is off, your browser asks for that site specifically. Once added, the same scanner and warning modal apply there too. If the warning fires on the wrong button (some sites have complex layouts), click the ✦ next to the site and pin the real send button. If a site later changes its layout and that calibration goes stale, Redactopia flags it — the on-page counter gets louder and a ⚠ appears on the site's side-panel row — so you can re-pin it instead of being falsely confident.
No. The scanner runs on a debounced check, not on every keystroke, so typing stays smooth in normal use.
A warning modal pops up over the page with the matched items called out. Four buttons: redact every match to a clean label, review and edit yourself, open the Redactor side panel for deeper edits, or send the original anyway. You're never blocked, only paused.
Yes, on the Chrome build. Copilot is a Microsoft product, and Edge, also Microsoft, doesn't allow third-party extensions to run on Microsoft's own pages. That's a platform rule that applies to all extensions equally, not something Redactopia-specific. If you want Copilot coverage, use Chrome. Everything else works the same in both builds.
It's on the roadmap. The goal is to publish the source so anyone can verify the privacy claims and build their own copy. No firm date yet — we'll announce when it's ready. The built extension bundle is already inspectable in your browser's extension folder.
Yes. Custom Patterns let you write your own regex-based checks, useful for org-specific stuff like internal ticket IDs or employee codes. They're stored locally — with an optional toggle to sync them across your own devices through your browser's own sync — and run alongside the built-in detectors. There's also a Browse library button with a growing set of starter patterns for common shapes if you don't want to start from scratch.