● 100% Local Processing — No Data Leaves Your Browser

Privacy Protection
for AI Chat

Automatically detect and mask 30+ types of sensitive data before it reaches AI providers. Free, open source, and entirely client-side.

30+
PII Types Detected
19
AI Platforms
4
Browser Targets
100%
Local & Free

How It Works

Transparent protection that works automatically in the background.

1

Type Your Prompt

Write naturally in any supported AI chat app — ChatGPT, Claude, Gemini, Copilot, and more.

2

Auto-Detect & Mask

The extension scans for 30+ PII patterns with Luhn validation and replaces them with placeholders or fake data.

3

Send Safely

Only the scrubbed text reaches the AI provider. Your real data never leaves your browser.

4

Auto-Restore

When the AI responds, original values are restored transparently. You see everything as normal.

Why AI Personal Firewall?

Comprehensive privacy protection built for the AI era.

🔒

30+ PII Types

Email, phone, SSN, credit cards (Luhn-validated), IPs, crypto wallets, passwords, API keys, tokens, and 10 international formats.

Smart Confidence Scoring

Every detection scores 0.0–1.0. Context heuristics reduce false positives for version numbers, math expressions, product codes, and more.

Luhn Checksum Validation

Distinguishes real credit card numbers from random digits. Valid cards get 0.95 confidence; invalid drop to 0.3.

📈

Live Dashboard

Monitor all detection activity from the toolbar popup — requests scrubbed, PII breakdown, and per-type stats.

🎨

Realistic Fake Data

Optional realistic masking mode generates convincing fake data instead of placeholders for even more natural-looking prompts.

💻

CLI + REST API

Also available as a command-line tool for batch processing, CI/CD pipelines, and a local REST API server for integration.

Detected PII Types

30+ patterns across 9 categories with international support.

Emailuser@example.com
Phone+1 (555) 123-4567
SSN123-45-6789
Credit Card4111-1111-1111-1111
IP Address192.168.1.1
Passwordpassword=...
API Keysk-...
Crypto Wallet0x...
MAC Addressaa:bb:cc:dd:ee:ff
DOB01/15/1990
PassportA12345678
Driver LicenseDL1234567
Street Address123 Main St
Bank Accountacct# 12345678
Routing #123456789
JWT TokeneyJ...
AWS KeyAKIA...
GitHub Tokenghp_...
Slack Tokenxoxb-...
UK NIAB123456C
UK NHS123 456 7890
India Aadhaar1234 5678 9012
India PANABCDE1234Z
China ID110101199001011234
Canada SIN123 456 789
Australia TFN123 456 789
Japan My Number1234-5678-9012
Brazil CPF123.456.789-00
Brazil CNPJ12.345.678/0001-90
France INSEE1 99 99 99 999

Supported AI Platforms

Works automatically with all major AI chat providers.

ChatGPT Copilot Gemini Claude Perplexity Poe Groq Mistral Cohere Meta AI DeepSeek You.com Kimi Qwen Jina Phind Google AI Chat

Get Started

Available on all major browsers, plus CLI and REST API. Everything is free and open source.

🌎

Chrome / Edge

Load unpacked from source — works today:

  1. Download the repo (ZIP)
  2. Open chrome://extensions
  3. Enable Developer mode
  4. Click Load unpacked → select extension/

Chrome Web Store & Edge Add-ons listing pending

🐙

Firefox

Load a temporary add-on from source:

  1. Download the repo (ZIP)
  2. Open about:debugging
  3. Click This FirefoxLoad Temporary Add-on
  4. Select firefox/manifest.json

Firefox AMO listing pending

💼

CLI Tool

Scan files, folders, and streams from the terminal:

npm i -g ai-firewall
ai-firewall scan ./docs
🌐

REST API / Demo

Local API server with 9 endpoints, or test the engine in your browser:

▶ Launch Interactive Demo

POST /scrub · POST /scan · GET /health

Pricing

Free forever for individuals. Upgrade to Pro once — unlock premium features for life. No subscription, no account, no tracking.

FREE FOREVER

Free

$0 / forever

Everything you need to guard your personal AI chats — on all your devices.

  • 30+ PII types detected & masked automatically
  • Luhn-validated credit card detection
  • Privacy Route (SOCKS5/HTTPS proxy) for 19 AI sites
  • WireGuard VPN toolkit — server + client + kill switch
  • Browser extensions: Chrome / Edge / Firefox / Safari
  • 100% local — nothing leaves your device
Launch Demo

Team

Custom

For organizations that need scale, control, and support.

  • Everything in Pro
  • Self-hosted REST API deployment
  • Team policies & centralized rules
  • Audit logs & compliance export
  • Dedicated onboarding
  • Annual support contract & SLA
Contact Us
🛡 30-day money-back guarantee. If Pro isn't right for you, email us within 30 days for a full refund — no questions asked.
Feature Free Pro Team
PII masking (30+ types) email, phone, SSN, card, keys, tokens...
Credit card detection (Luhn) validated card numbers, all major networks
Privacy Route proxy mode route 19 AI sites through your own SOCKS5/HTTPS proxy
WireGuard VPN toolkit server + client + kill switch, free server guide
Platforms Chrome, Edge, Firefox, Safari, CLI, REST API, VS Code, PWA
Custom detection rules define your own PII patterns & tokens
Compliance reports GDPR, HIPAA, PCI-DSS exports
Priority support fast responses + feature request voting
Team policies & central rules enforce per-org configuration
Audit logs & compliance export who scrubbed what, when
Dedicated onboarding & SLA annual support contract

Pricing FAQ

Is Pro really a one-time payment?

Yes. Pay $29 once and the Pro license key is yours forever. No subscription, no renewal fees, no recurring charges — and the code stays open source & MIT regardless.

How does the 30-day money-back guarantee work?

Within 30 days of purchase, email us via the support page and we'll refund the full amount, no questions asked. Keep the license or don't — your call.

Why is the VPN free if Pro cost $29?

The underlying VPN is fully self-hosted — you run the server on a free tier (Oracle/Google), and WireGuard itself is open source. That's why the toolkit is free for everyone. Pro adds the convenience layer on top: a 1-click launcher, login auto-start, and baked-in kill switch so the tunnel is effortless and leak-proof on every boot.

Do I need a credit card to try it?

No. The Free tier is complete and unlimited — no account, no credit card, no time limit. You can even contribute via Buy Me a Coffee if you just want to say thanks.

What's the difference between Privacy Route and the VPN?

Privacy Route is the extension mode that sends only your AI-chat traffic through a SOCKS5/HTTPS proxy you control. The WireGuard VPN is full-network — every byte on your device rides an encrypted tunnel. Use proxy for AI chat, VPN for everything, or both.

Can I use Pro across multiple devices?

Yes — Pro includes a lifetime license key valid on unlimited devices (Chrome, Edge, Firefox, Safari, CLI, PWA). Install once and it's everywhere.

Open source & MIT licensed. Pro is a voluntary one-time license that funds development — you can also donate via Buy Me a Coffee.

Privacy Route

Optional secure-tunnel mode reroutes your AI-chat traffic through your own proxy or full WireGuard VPN endpoint — while every other site stays on its normal direct path.

💻Your BrowserAI chat sites only
🔒Secure Tunneloff
🤖AI Providerdirect
Traffic currently goes direct to AI providers.
Demo simulation. The browser-extension Privacy Route routes all 19 AI sites through your own SOCKS5/HTTPS proxy. For full network protection, pair it with the bundled native WireGuard VPN (server + client + kill switch) — vpn/socks5-bridge.mjs bridges the two.

Built-in WireGuard VPN

A real, native VPN for full network privacy — built on the audited WireGuard protocol. You host the server, so no third-party provider ever sees your traffic. Runs on a permanently free server kit.

1. Get a free server

$0 forever — Oracle Cloud & Google Cloud free tiers run WireGuard with room to spare. See FREE_VPS.md. (Or any Ubuntu VPS ~$4/mo.)

2. Generate keys

One command creates real X25519 keypairs plus server and per-client configs with pre-shared keys.

3. Connect client

Windows installer pulls the official WireGuard tools, imports your config, and connects. Kill switch blocks leaks if the tunnel drops.

4. Use it with the extension

The SOCKS5 bridge — then hit Connect VPN in the extension popup to route all AI traffic through the tunnel.

terminal — quick start
# WINDOWS — one click, every time (after setup): # double-click VPN-Connect.bat (or VPN-Enable-AutoStart.bat for login auto-connect) # Setup once (one command, auto deploys + connects): node vpn/setup.mjs --host YOUR_VPS_IP --user root # No server yet? Get a FREE one: vpn/FREE_VPS.md # (Oracle Cloud Always Free / Google Cloud e2-micro, $0 forever) # ...or manual, step by step vpn/ folder commands: bash vpn/server/setup.sh # on your VPS (once) node vpn/generate.mjs --endpoint YOUR_VPS_IP # local keys + configs node vpn/socks5-bridge.mjs # local SOCKS5 proxy # In the extension popup, hit "Connect VPN"

🛡 Real WireGuard

Built on the audited WireGuard protocol & standard crypto (X25519 + pre-shared keys) — not a custom VPN. The vpn/ folder in this project has everything.

🔒 Kill Switch

Blocks all non-tunnel traffic at the firewall if the VPN drops — no leaks to your ISP when the tunnel is down.

🛡 You host the server — free

No third-party VPN provider sees your traffic. Free tiers (Oracle/Google) give you a permanent $0 server — all AI traffic rides your private encrypted tunnel.

🔗 Full docs

Architecture, security notes, and step-by-step quick start in vpn/README.md.

Works with the extension's Privacy Route — the SOCKS5 bridge (vpn/socks5-bridge.mjs) connects them.

Download

Get the extension for your browser. Load it as an unpacked extension, or grab the source for any platform.

Screenshots

See AI Personal Firewall in action — real-time protection, detection, and analytics.

Popup dashboard showing scrubbing stats and PII breakdown
Privacy Dashboard
Real-time scrubbing stats, PII counts, and one-click toggle.
PII detection and masking in a ChatGPT chat
Auto-Detection in ChatGPT
Email, phone, SSN, and card masked with confidence scores.
Analytics dashboard with bar chart and PII breakdown
Live Statistics
Detections by type, platforms, and masked-volume trends.

Promotional art for the store listings:
Small promo tile
Marquee promo tile

Documentation

Full setup and operations guides for the firewall, CLI, and VPN — available to Pro members after signing in with your license key.

🔒

Pro Members Only

The complete guides (WireGuard VPN setup, free-server walkthrough, installer source, and privacy details) are for Pro members.

Purchased Pro? Your license key was emailed to you after checkout.

Try It Now

Test the PII detection engine directly in your browser. No installation required.

▶ Launch Interactive Demo