Privacy policy

Effective 27 June 2026 · updated 4 October 2026

Airlock is built so that this page can be short. The extension processes everything on your device. It collects nothing, sends nothing, and stores nothing on any server. The only time anything reaches us is if you buy Airlock Pro and activate it, which is described below.

What Airlock does

Airlock detects sensitive content in your prompt (emails, cards, secrets, identifiers, and names, organisations and places via a small model that runs in your browser), replaces each value with a placeholder, and lets you send only the placeholder version to an AI assistant. When the reply returns, Airlock restores your real values locally so it reads naturally. The key map that links placeholders to real values lives only in your browser and is never transmitted.

What we collect

From the extension: nothing. It has no accounts, no analytics, no telemetry, and no tracking. It makes no network requests of its own. You can confirm this: open your browser's network tab and watch Airlock stay silent.

Buying and activating Pro, the one place anything reaches us

The free extension never contacts us. If you buy Airlock Pro, these things happen, and only these:

• The purchase is handled by Gumroad, under Gumroad's own terms and privacy policy. Gumroad processes your payment details and name. We receive your email address and a sale ID through its license check.
• Activation: on the activation page you paste the license key from your receipt. Our server sends it to Gumroad to confirm it is valid and has not been refunded, then returns a signed token containing your email, the sale ID and a random device ID. The extension verifies that token offline from then on.
• One device at a time: to keep a license on a single device, we keep one small record per license, the sale ID and the random device ID, in a Redis store hosted by Upstash. Releasing the license deletes it. Nothing in it relates to your prompts or your browsing.
• Hosting: Vercel hosts this website and the activation step, and keeps standard request logs (IP address, browser, pages requested). Its servers can be outside India.
• Fonts: this website loads its typefaces from Google Fonts, so Google can see your IP address and browser details when a page opens.

We keep the sale ID, email and device ID for as long as the license is in use, so it keeps working, and delete the device record when you release it. Ask us to delete anything else we hold about you.

Permissions, and why

• storage saves your settings and your own sensitive-term list locally in your browser. It is never synced to us.
• offscreen runs the on-device name-detection model in a background page on your machine.
• Airlock requests no network or host permission of its own. It only adds a redaction layer to the AI sites you already use.

Your data and third parties

We do not sell or share your data. The extension never receives your prompts and uses no third-party services; for Pro, Gumroad, Vercel and Upstash act as described above. When you choose to send a redacted prompt to ChatGPT, Claude or Gemini, that text goes to those providers under their own policies. Airlock's entire job is to make sure the sensitive parts are replaced with placeholders before that happens.

Children

Airlock is a professional tool and is not directed to children under 13.

Changes

If this policy changes, we will update the date above and post the new version here.

Contact

Questions about privacy: asrith@made-by-ac.com