LLM MaskPrivacy policy — LLM Mask
Version 1.0 · 15 October 2026 · Applies to the LLM Mask browser extension (Chrome, Edge), the LLM Mask web app for phones, and the website llmmask.app. Nederlandse versie: privacyverklaring.
LLM Mask is made by Scere Intelligent Reporting, Touwbaan 45, 2941 XV Lekkerkerk, the Netherlands, Chamber of Commerce (KvK) 42130283, [email protected]. We are the party responsible for this policy.
The short version
- LLM Mask runs entirely in your browser. The text you paste, type or copy is checked on your own computer and never sent to us. We have no server that receives it.
- LLM Mask keeps no account, no profile and no analytics about you.
- What LLM Mask stores stays in your browser: your settings, a placeholder map that lives in memory until the browser closes, and a log of counts (how many details of which kind were replaced, on which site) — never the text itself.
- If your organisation has switched on reporting, those counts (and, optionally, a name your organisation chose for you) go to an address your organisation controls, such as its own Google Sheet. Not to us.
What the extension processes, and where
| Data | Where it is processed | Stored? | Sent anywhere? |
|---|---|---|---|
| Text you paste, drop or type on a supported AI site | In your browser, at the moment you paste or send | No | No. Only what you choose to send goes to the AI site, as always. |
The real values behind placeholders (for example that [NAME_1] is a particular name) |
In your browser's session memory | Until the browser closes; never on disk | No |
| The highest placeholder number used per kind on each AI site (for example "chatgpt.com: names up to 3"), so a number is never reused for someone else | In your browser's local extension storage | Yes, until you remove the extension; numbers only, no values | No |
| Your settings (mode, preset, company terms, addresses your organisation configured) | In your browser's extension storage; synced by your browser if you are signed in to it | Yes, until you change or remove them | Only through your browser's own sync, if you use it |
| Name lists you import (names of clients or staff, with each file's name and import date), if you use that option | In your browser's local extension storage, on this computer only; not synced | Yes, until you press Remove next to a list, import a file with the same name again, or remove the extension | No |
| LLM Mask Plus only, if the option is switched on: the text in the message box is also read by a model that finds names and ID, phone and account numbers | In your browser, on your computer; the text is not stored | No. Names and numbers the model found are remembered in that tab's memory until it closes | No |
| LLM Mask Plus only: the model file itself (about 45 MB; trained by LLM Mask on made-up data only) | Downloaded once from LLM Mask's own download server (models.llmmask.app, stored with Cloudflare R2; Cloudflare, Inc. handles the download for us as processor) when the option is switched on. The server sees your IP address, as with any download; no text or other data is sent |
Yes, in the extension's storage on your computer, until the option is switched off | No |
| LLM Mask Plus only, if the option is switched on: reading data for text recognition in scans and photos (3 to 6 MB; from the open-source Tesseract project) | Downloaded once from LLM Mask's own download server (models.llmmask.app, stored with Cloudflare R2; Cloudflare, Inc. handles the download for us as processor) the first time a scan or photo is uploaded. The server sees your IP address, as with any download; no file, text or other data is sent |
Yes, in the extension's storage on your computer, until the option is switched off | No |
| Activity log: time, website, how (paste/send/upload/copy/download), outcome, number per category, file type of a download | In your browser's local extension storage | Last 500 events, on your computer | Only if your organisation configured a report address (see below) |
| Names of uploaded files | Shown to you in a dialog | No | No |
| LLM Mask Plus only, if safe dictation is switched on: your voice while you dictate, recorded in LLM Mask's own dictation window after you press Start dictating, and turned into text there | In your browser, on your computer | No. The last recording is kept in the window's memory until you record again or close the window, then wiped; it is never written to disk or logged. Only if you click Save the recording, details muted is a copy saved, as a file on your own computer, with the personal details LLM Mask found silenced | No. Only the text you choose to insert goes to the AI site, after the usual check |
| LLM Mask Plus only: the speech model for the language you dictate in (250 to 670 MB; the open models Parakeet TDT 0.6B v3 of NVIDIA, Whisper small of OpenAI and Omnilingual ASR of Meta, each for its own languages) | Downloaded once from LLM Mask's own download server (models.llmmask.app, stored with Cloudflare R2; Cloudflare, Inc. handles the download for us as processor) the first time dictation is used. The server sees your IP address, as with any download; no audio, text or other data is sent |
Yes, in the extension's storage on your computer, until the option is switched off | No |
| Contents of files you upload or drop on a supported AI site (text, Word, Excel and PowerPoint files; in LLM Mask Plus also PDFs, and with its option on scans, photos and the pictures inside files, read with text recognition) | In your browser, at the moment you upload, to find details and make a cleaned copy if you choose one | No; the file on your computer is never changed | No. Only the file you choose to upload (the cleaned copy or the original) goes to the AI site, as always. |
The extension reads page content only on the AI sites listed in its permissions, and only to check what you paste, send or copy there. It does not read your browsing history, other websites, or the AI's answers unless you copy them.
Reporting to your organisation
An organisation can configure a report address (an https:// address it controls) and a report name for each computer. LLM Mask then sends each activity event — counts and categories as described above, the website, the report name and a random device identifier — to that address. LLM Mask never includes the text that was checked, the placeholders, or the real values.
Your organisation is the controller for those reports under the GDPR. Questions about what it collects and why, and about your rights, go to your employer. We, the makers of LLM Mask, do not receive these reports and cannot access them.
The web app for phones
The LLM Mask web app works the same way: text is checked on your phone, the placeholder map and your list of words to replace are kept in your phone's browser storage (until you use Forget all or clear the site's data), and nothing is sent to us. The page can be installed on your home screen and works offline once opened.
The website
llmmask.app uses no cookies and no analytics. The site is hosted on Cloudflare Pages: Cloudflare, Inc. handles each request for us as processor, which means it sees your IP address to deliver the page and to protect the site against attacks, as with any website. We don't use Cloudflare's visitor statistics. If you contact us by email, we keep your message as long as needed to answer it and for our records, at most two years. If you join the waiting list for LLM Mask Pro, which you do by sending us an email, we keep your email address and your answers only to tell you whether and when Pro comes; we delete them after that message, or earlier if you ask. Legal basis: your consent, which you can withdraw by email at any time.
Payments and customer records
If your organisation buys a Team licence, we keep the details needed for the contract and invoice: organisation name, address, contact name and email, invoice history. Legal basis: performance of the contract and our tax obligations. Retention: seven years for invoices (Dutch tax law); other contact details until two years after the contract ends. If you pay by card or payment link, the payment is handled by the payment provider named on the invoice; we never see or store card numbers.
What we never do
- We never receive, store or read the text you check with LLM Mask.
- We never sell or share data with anyone, and we use no data for advertising.
- The extension loads no code from the internet and connects to no server of ours.
Your rights
Under the GDPR you can ask us for access to, correction or deletion of the personal data we hold about you (in practice: contact and invoice details), object to processing, or ask for a copy. Email [email protected]. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). For data held by your employer in its own reports, contact your employer.
Changes
We will update this page when LLM Mask changes how it handles data, and note the date at the top. Material changes are also announced in the extension's release notes.
Contact
Scere Intelligent Reporting · Touwbaan 45, 2941 XV Lekkerkerk, the Netherlands · [email protected] · KvK 42130283