Privacy Policy

Last updated: June 2026

Leakless is a Chrome extension that detects and masks secrets, credentials, and personally identifiable information (PII) in text you paste or select — so you can share a safe version in Slack, Jira, GitHub, or an AI chat. Leakless runs entirely on your device. It does not collect, upload, transmit, or store any of the text you redact.

What Leakless processes and where

When you paste text into the Leakless popup or use the right-click "Copy redacted" menu, the text is analyzed by detection patterns bundled inside the extension. All of this happens locally in your browser. The text you enter and the redacted output are never sent to any server, and Leakless retains no copy of either.

What stays on your device

Your settings and preferences (chosen mode, custom rules if Pro) are stored in chrome.storage.local and never leave your browser.
Detection patterns are bundled inside the extension package at install time. No pattern updates are fetched from a server.
Pro license status, once activated, is stored locally so the extension does not need to re-check it on every use.
Nothing you paste is logged, stored, or transmitted — not the raw text, not the redacted text, not the detected secret values.

The only network request

If you choose to activate a Leakless Pro license, the extension contacts Lemon Squeezy once to verify your license key. This request sends only your license key — it contains no text you have pasted, no detected secrets, no browsing data, and no personal information beyond the key itself. After activation, Pro status is stored locally and the extension does not contact any server again.

No other network request is ever made. There is no telemetry, no analytics endpoint, and no remote code loading.

What Leakless does not do

No analytics, telemetry, or usage tracking of any kind.
No transmission of pasted text, detected secrets, or redacted output.
No advertising and no selling or sharing of data.
No remote code — all detection logic ships inside the extension package.
No host permissions and no content scripts — Leakless cannot read or modify web pages you visit. It operates only on text you explicitly provide via the popup or right-click menu.

Permissions explained

contextMenus — adds the "Copy redacted" option to the right-click menu on selected text.
clipboardWrite — copies the redacted output to your clipboard when you click "Copy".
offscreen — used to run clipboard operations in a background document (a Chrome MV3 requirement for clipboard access outside of a user gesture in the popup).
storage — saves your settings and Pro license status locally on your device.
notifications — optionally shows a brief confirmation after "Copy redacted" so you know the operation succeeded.

There are no host permissions (<all_urls> or otherwise). Leakless cannot access, read, or modify any website you visit.

Data collection declaration

Leakless does not collect any user data. For every data category in the Chrome Web Store privacy practices tab, the answer is does not collect.

Questions? Email opticmix.lab@gmail.com.

If this policy changes, the "Last updated" date above will change accordingly.