Skip Shadow browser extension, privacy policy

Data controller: RedCarbon (operating the Skip Security brand), 33 avenue Philippe Auguste, 75011 Paris, France. Contact: contact@skipsecurity.com.

The Skip Shadow extension is deployed by an organization (typically an employer) to measure where sensitive data meets AI assistants, without reading or storing what employees write.

  • It runs only on the supported AI websites (ChatGPT, Claude, Gemini, Microsoft Copilot, Mistral). It does not observe any other browsing.
  • When a message is sent to one of these AI tools, obvious sensitive data (bank details, payment cards, national identification numbers, phone numbers, emails, technical secrets) is masked inside the browser, before anything leaves the device.
  • The masked copy is transmitted over TLS to the organization's Skip service, hosted in the European Union, where it is analyzed in transit for residual sensitive data, then immediately discarded. Message content is never stored, anywhere.
  • Only metadata is retained: which AI tool, when, which categories of sensitive data, and counts. Retention: 30 days by default.
  • If the organization enables the warning mode, the extension may show a confirmation dialog before a risky message is sent. The decision (sent or cancelled) is recorded as a counter only, never with the message text.

No browsing history collection. No keystroke logging outside the supported AI composers. No advertising, no profiling, no sale of data. No processing outside the European Union.

The organization deploying the extension is responsible for informing its members. For any privacy question or request, contact your organization's administrator or contact@skipsecurity.com.

Résumé en français

L'extension Skip Shadow n'observe que les sites d'IA supportés. Les données sensibles évidentes sont masquées dans le navigateur, avant tout envoi. Le contenu des messages n'est jamais stocké : il est analysé en transit dans l'Union européenne puis immédiatement oublié. Seules des métadonnées (outil, date, catégories, volumes) sont conservées 30 jours. Pas d'historique de navigation, pas de publicité, pas de revente, aucun traitement hors Union européenne. Questions : votre administrateur ou contact@skipsecurity.com.