Your private data never leaves your browser. Here is exactly how we guarantee it β and how you can verify it yourself.
All masking and anonymization runs entirely inside your browser. Your private data never reaches our β or anyone else's β servers.
The ChatWall editor runs inside an isolated Shadow DOM container. The host website's scripts cannot access what you type inside it.
Our code is Source Available on GitHub. Security teams and technical users can audit every line to verify our claims.
Some anonymization tools send your data to remote servers to perform masking. This means you must fully trust their infrastructure β and if their server is compromised, your original sensitive data (names, emails, IBANsβ¦) can be seen and exploited.
ChatWall takes a fundamentally different approach: all masking happens inside your browser, via client-side JavaScript. No payload β not even the masked version β is ever sent to our backend.
The chat website can technically access everything you type in its native input fields before you even send your message β through JavaScript event listeners, keyloggers, or telemetry scripts. When you type in the ChatWall editor overlay, your text is entered in an isolated extension window that the host website's scripts cannot read. Only the already-masked version is ever pasted into the chat input.
| Feature | ChatWall | Other tools (cloud-based) |
|---|---|---|
| Masking location | β In your browser | β On a remote server |
| Your data sent to vendor's server | β Never | β Yes (to mask it) |
| Protected from AI website scripts | β Yes β Shadow DOM isolated | β οΈ Often no β masking in native input or not isolated DOM |
| Token mapping / Favorites | β
Tokens: session only (memory) β οΈ Favorites: stored locally on device, never synced |
β οΈ Varies |
| Code transparency | β Source Available (GitHub) | β Closed source |
You don't have to take our word for it. You can prove that ChatWall makes zero data requests while masking, directly using your browser's built-in developer tools.
chrome://extensions in your browser.
[NAME_1] = 'John') exists
only in sessionStorage β in memory only. It is wiped when you close the browser tab and is
never sent anywhere.For any security or privacy inquiries:
StarObject S.A.
Email: [email protected]
Rue Jinken, 9 β L-9909 Troisvierges, Luxembourg