What stays on your device (everything that matters), the limited account data we store, and how the Prinn Companion extension handles data.
Prinn is built on one principle: your traffic, your secrets, and your clipboard are processed on your device. This policy explains what stays local, the limited data we store when you create an account, and how the Prinn Companion browser extension behaves. It covers the Prinn desktop application, the Prinn Companion extension, and the prinn.ai website.
Traffic inspection, secret detection, ad filtering, and the paste guard run entirely on your computer. Request and response bodies are never sent to us.
Vault secrets live in your operating system's credential manager. We never receive them.
The browser extension talks only to the Prinn app on your own machine (127.0.0.1). It has no remote servers, no analytics, and sends your browsing data nowhere.
We sell no data. There is no advertising, profiling, or data brokerage of any kind.
The content of your network traffic, the pages you visit, your clipboard contents, the secrets Prinn detects, your vault entries, and your files are processed locally and are never transmitted to Prinn. Detection happens on-device; when Prinn masks or blocks a secret, the secret itself never leaves your machine.
To do its job, the desktop app locally inspects network requests you route through it, scans clipboard text at copy/paste time, keeps an ad-filter cache, and stores settings and audit entries in a local database. Vault items are stored in the macOS Keychain, Windows Credential Manager, or Linux Secret Service; the local database keeps only masked previews and salted fingerprints used for matching. All of this stays on the device and is removed when you uninstall Prinn and delete its data folder.
Account: e-mail address and authentication data (managed by Supabase, our backend provider).
Subscription and billing: plan, seat, and payment status. Card payments are handled by Stripe; we never see or store full card numbers.
Devices: device name, operating system and version, app version, and last-seen time, used for seat limits and support.
Teams: team name, member e-mail addresses, roles, and the policy settings a team owner configures.
Crash reports: if the app crashes or fails to start, it stores a small local report (crash type, sanitized error message with your home directory masked, app version, operating system, tier) and uploads it the next time you start the app signed in. Reports are sanitized before they leave your machine and never include your traffic, secrets, or files.
Beta telemetry: beta builds may send counted, content-free product events (for example "an alert was shown", "N ads were blocked", provider names, never secret values). Production builds without the beta flag send nothing.
Vault, session, and file sharing between Prinn users is end-to-end encrypted; content travels peer-to-peer or as ciphertext we cannot read. Our servers store only share metadata (sender, recipient e-mail, timestamps, expiry) and encrypted payloads. The team ledger and its cloud backup are encrypted with keys held by your team; we store ciphertext only.
The extension extends Prinn's protection into your browser. Its entire network surface is the Prinn app running locally on your computer (http://127.0.0.1:8787). It makes no other network connections and includes no analytics or tracking of any kind.
Page content is evaluated inside your browser to hide ads, collapse empty placeholders, guard in-page paste events, and offer vault autofill. Page content is not transmitted anywhere except, where needed, to the local Prinn app on your own machine.
storage keeps filter rules and per-site settings cached locally in your browser.
declarativeNetRequest applies ad/tracker blocking rules inside the browser.
webNavigation + activeTab support per-site controls and the optional auto-close of blocked pop-up tabs.
alarms schedules periodic local rule refreshes.
The extension collects no personal data, sends nothing to remote servers, and works only together with the Prinn desktop app. Uninstalling the extension removes its local storage.
Local data disappears when you uninstall Prinn and remove its data folder. Account data is kept while your account exists; deleting your account removes your account record, device records, team memberships, share metadata, and diagnostics tied to your user. To request deletion, contact us at the address below.
Where GDPR or similar laws apply: we process account and billing data to perform our contract with you, diagnostics on our legitimate interest in keeping Prinn reliable (crash reports contain no personal content by design), and beta telemetry only in beta builds you knowingly install. You may request access, correction, export, or deletion of your account data at any time.
Prinn is not directed at children under 16, and we do not knowingly collect their data.
We will update this policy when our practices change and adjust the effective date above. Material changes are announced in the app or by e-mail.
Questions or requests: support (at) prinn.ai