Prompt Injection Check privacy notice
Prompt Injection Check scans pasted text in your browser. The text, findings, and copied draft are not sent to a Prompt Injection Check server or AI API.
What stays on your device
The scanner processes the current text, findings, score, highlights, and cleaned draft in browser memory. We do not add accounts, prompt logging, content-derived analytics, or server-side storage.
Clipboard
“Copy cleaned text” uses your browser’s clipboard permission only when you activate it. The original input remains unchanged. Verify any copied draft manually before use.
Hosting metadata
Our hosting and CDN provider may process ordinary technical request metadata needed to deliver a website, such as an IP address, timestamp, user agent, and requested URL. Prompt Injection Check does not put pasted content in URLs or request logs.
Analytics
Prompt Injection Check uses Google Analytics 4 on the public domain to understand aggregate visits and improve the site. Google may process technical information such as page views, browser details, approximate location, and cookie or device identifiers. Pasted text, scan findings, and clipboard contents are never sent to Google Analytics. Analytics are not loaded on local development or preview deployments. You can limit cookies or block analytics using your browser settings or a content-blocking extension. See Google’s privacy policy for the provider’s terms.
Limits
Do not paste passwords, API keys, confidential documents, or personal data into any online tool. Prompt Injection Check is a warning and education tool, not a guarantee that text is safe.