Coprepaste Privacy Policy

Last updated: April 22, 2026

TL;DR — Coprepaste does not collect, transmit, store, sell, or share any information about you or the pages you redact. All processing happens on your device, inside your browser. There is no account, no telemetry, and no analytics.

What Coprepaste does

Coprepaste is a browser extension that copies the visible text of the current page to your clipboard after replacing personally identifying information (names, email addresses, phone numbers, addresses, dates, URLs, account numbers, and secrets) with category tags such as [PERSON] or [EMAIL].

Where the processing happens

All detection and replacement runs entirely on your device, inside a sandboxed browser context, using an open-source ONNX model executed by ONNX Runtime Web (WebAssembly). The page you copied from is never sent to a remote server by this extension.

What the extension accesses

• Active tab contents. When you click the extension's toolbar icon, it reads the visible text of that single tab so it can redact and copy it. It does not read the contents of any other tab, and it does not read any tab in the background.
• Your clipboard. The redacted text is written to the system clipboard via a scripted copy in the active tab.
• Extension storage. Your category on/off preferences are stored in chrome.storage.sync, which Chrome uses to sync preferences across your own Chrome installations when sync is enabled. No page contents are ever placed there.
• Model files. The first time you use the extension, it downloads the redaction model weights and tokenizer once from our static asset host (coprepaste-static.simplyalec.com). Your IP address is exposed to this host only during that one-time download, the same as any web request. The downloaded files are cached in the browser's IndexedDB for subsequent use.

What Coprepaste does NOT do

• It does not transmit page contents to any server.
• It does not use cookies, tracking pixels, or third-party trackers.
• It does not include analytics, crash reporting, or telemetry.
• It does not create an account, and it does not ask you to sign in.
• It does not sell, share, or license any data about you. There is no data about you to sell.
• It does not read pages you have not explicitly acted on.

Third parties

The only external resource the extension fetches is the model itself, delivered over HTTPS from Cloudflare R2 via the coprepaste-static.simplyalec.com hostname. Cloudflare's privacy documentation is available at cloudflare.com/privacypolicy.

Children

The extension is not directed at children under 13. It does not knowingly collect any information from anyone.

Your rights

Because Coprepaste collects no personal data, there is no data to access, correct, export, or delete. You can uninstall the extension at any time from your browser's extensions page; doing so also removes the cached model files and any preferences it stored.

Changes to this policy

If the behavior above ever changes, this document will be updated and the date at the top will reflect that. Material changes will also be noted in the extension's release notes.

Contact

Questions about this policy: [email protected]