Skip to content
AImori
EN
Free for Chrome
Menu

Privacy and security

A tool against data leaks must not pass on data itself: AImori is built so that your input cannot leave the device.

Check it yourselfWhich permission for whatSource code on GitHub

No network access

No network code; the security policy forbids connections (connect-src 'none'), tested with every change.

No server, no account

No sign-in, no licence check, no server that anything would be reported to.

No telemetry

No usage statistics, no crash reports, no advertising.

Few permissions

Runs only on the supported AI sites; other websites only if you allow it.

What is stored locally

  • Your settings and custom terms – the terms only as salted checksums
  • Daily counters: how often a category was detected on which AI site and how you decided – deleted after 90 days
  • Monthly counters for the AI literacy record – deleted after 13 months, can be turned off
  • "Not sensitive": only an HMAC checksum per value, 30 days, at most 500 entries
  • Only until the browser closes (storage.session): account type per tab, status of the local AI and – if set up – salted checksums of text from confidential sources (30 minutes)

Not stored: texts, excerpts, detected values or file names; checksums of matches only if you choose "Not sensitive". Placeholder mappings stay in the tab's memory only. None of this leaves the device; you can delete counters and lists in the settings.

Check it yourself

You do not have to take our word for it, you can check – AImori is open source, and the entire source code is public on GitHub (GNU AGPL v3):

  1. Open edge://extensions or chrome://extensions in your browser and click "Details" for AImori. It lists the permissions and the websites the extension may run on – by default only the AI sites, others only if you have allowed them.
  2. Open the file manifest.json in the extension package: permissions lists storage, scripting, offscreen, activeTab and declarativeContent, and there are no host_permissions. Further websites are only listed under optional_host_permissions and only apply after your consent (which permission is for what).
  3. Which data types are detected and by which public rules is fully documented in the list of data types and the sources of the validation methods.
Permissions in the extension packagemanifest.json
"permissions": ["storage", "scripting", "offscreen", "activeTab", "declarativeContent"],
"content_scripts": [{ "matches": [
  "https://chatgpt.com/*",
  "https://claude.ai/*",
  "https://gemini.google.com/*",
  "https://copilot.microsoft.com/*",
  "https://copilot.com/*",
  "https://copilot.cloud.microsoft/*",
  "https://m365.cloud.microsoft/*"
] }],
"optional_host_permissions": ["https://perplexity.ai/*", …, "https://*/*"]

This also applies to employers

If AImori is deployed centrally in a company, IT can set the rules – but cannot retrieve any content. That function does not exist. The extension openly shows employees who manages it.

Limits

AImori reduces the risk of sharing data by mistake, but it is not a complete data loss prevention system and does not replace policies or training. Anyone who deliberately wants to bypass the extension can do so – for example via other browsers or apps. Companies can make this harder with browser policies (guide).

This website

This website sets no cookies, loads no third-party fonts or scripts and uses no tracking. Details are in the privacy policy.

Free for Chrome