Privacy

Last updated: October 13, 2026

Stand-In is built so that we never receive your documents or the details in them.

What Stand-In processes. When you open a file in the Stand-In app or paste text into a supported AI chat site with the Stand-In extension, Stand-In reads that text on your device to find private details such as names, ID numbers, account numbers, email addresses, phone numbers and street addresses. It replaces them with placeholders before the text reaches the site.

Where your data stays. All detection, masking and restoring happens in your browser. The placeholder key for each tab is kept in your browser's session storage and is deleted when the tab or browser closes. Your settings (such as which detection packs are on and your "always mask" list) are stored in Chrome's sync storage under your own Google account.

Founding-member list. If you join the founding-member list on our website, we keep the email address and role you enter, stored by our web host, Netlify. We use it only to tell you when Stand-In Pro opens. Reply to any email from us to be removed.

What we collect from the app and extension. Nothing. Stand-In has no servers that receive your text, keys, settings or usage. We use no analytics or tracking.

Locked keys. If you save a locked key, it's encrypted on your device with your passphrase (AES-256-GCM). We can't read it and can't recover a lost passphrase.

Permissions. Stand-In asks for access to supported AI chat sites so it can detect pastes there, clipboard read so you can paste an AI answer into the side panel with one click, storage for keys and settings, and context menus for "Restore with Stand-In."

Limits. No detection tool is perfect. Review what you send.

Contact. [your support email]