Chrome Extension Guide
Last Updated: 2026-02-16 Extension Version: 1.0.130
Overview#
The cloak.business Chrome Extension protects your privacy by automatically anonymizing PII before sending messages to AI assistants like ChatGPT, Claude, and Gemini. Your sensitive data is replaced with anonymized placeholders before it reaches the AI service.
Key Benefits:
- JIT Protection: Intercepts messages before they're sent
- Reversible Encryption: Decrypt responses to see original values
- Multiple AI Services: Works with ChatGPT, Claude, and Gemini
- Seamless Integration: No copy-paste required
Table of Contents#
- Installation
- Quick Start
- Supported AI Services
- Features
- Using the Extension
- Anonymization Methods
- Presets & Entities
- Settings
- Troubleshooting
- FAQ
Installation#
Chrome Web Store#
- Visit the cloak.business Chrome Extension page
- Click Add to Chrome
- Click Add extension in the confirmation dialog
- The extension icon appears in your toolbar
Manual Installation (Development)#
- Download the extension from your cloak.business dashboard
- Open Chrome and navigate to
chrome://extensions - Enable Developer mode (toggle in top-right)
- Click Load unpacked
- Select the
chrome_extensionfolder
Quick Start#
1. Sign In#
- Click the extension icon in your Chrome toolbar
- Enter your cloak.business API key
- Click Sign In
Getting your API key:
- Sign in at cloak.business
- Go to Dashboard > API Keys
- Create a new API key and copy it
2. Enable Protection#
- Navigate to a supported AI service (e.g., chatgpt.com)
- Click the extension icon
- Toggle Enable Protection for this site
3. Send a Protected Message#
- Type your message as normal
- Click Send (or press Enter)
- The extension intercepts and shows a preview
- Review detected entities
- Click Send Protected
Your message is now anonymized before reaching the AI service.
Supported AI Services#
| Service | URL | Status |
|---|---|---|
| ChatGPT | chatgpt.com, chat.openai.com | Fully supported |
| Claude | claude.ai | Fully supported |
| Gemini | gemini.google.com | Fully supported |
Character Limit: 3,998 characters per message
Why the limit? Claude.ai converts longer text into "content blocks" which cannot be anonymized. This limit ensures consistent protection across all platforms.
Features#
Preview Modal#
When you send a message with PII, the extension shows a preview:
- Detected Entities: Color-coded list of all PII found
- Entity Toggle: Enable/disable specific entity types
- Method Selection: Choose anonymization method
- Preset Selector: Switch to different regional presets
- Encryption Key: Select which key to use for encryption
De-anonymization#
After the AI responds, the extension automatically:
- Detects encrypted values in both your message AND the AI response
- Decrypts them using your encryption key
- Displays original values with green highlighting
- Shows entity type badges (Person, Email, etc.)
Toggle View#
Click the floating toggle button to switch between:
- Original View: See decrypted values (green highlighting)
- Encrypted View: See the encrypted tokens
Copy Buttons#
- Copy Decrypted Message: Copy your original message
- Copy Decrypted Response: Copy the AI response with original values restored
Using the Extension#
Standard Workflow#
1. Type message with PII "Email john@example.com about the meeting"
↓
2. Click Send Extension intercepts
↓
3. Preview appears Shows: EMAIL_ADDRESS detected
↓
4. Choose method Select: Encrypt
↓
5. Click Send Protected Message sent with encrypted email
↓
6. AI responds Using encrypted value
↓
7. Auto-decrypt Green highlighting shows "john@example.com"
Preview Modal Options#
Entity List:
- Click the checkbox to include/exclude an entity
- Hover to see the detected value
- Color indicates entity category (Person=blue, Email=purple, etc.)
Anonymization Method:
- Select method for all entities, or per-entity-type
- Default is Encrypt (reversible)
Preset Selection:
- Search by country name
- Switch presets and click Reanalyze to re-detect
Keyboard Shortcuts#
| Action | Shortcut |
|---|---|
| Send Protected | Enter (in preview modal) |
| Cancel | Escape |
Anonymization Methods#
| Method | Description | Reversible | Example |
|---|---|---|---|
| Replace | Substitute with type label | No | <PERSON> |
| Redact | Remove entirely | No | (empty) |
| Hash | SHA-256 hash | No | 3c4a7b8d... |
| Mask | Partial obscuring | No | J*** D** |
| Encrypt | AES-256 encryption | Yes | LzqYf_zJ... |
Recommendation: Use Encrypt for most use cases. It's the only method that allows you to see original values in AI responses.
Presets & Entities#
Using Presets#
Presets are pre-configured entity collections for specific regions or industries:
- In the preview modal, click the preset dropdown
- Type to search (e.g., "Deutschland", "Healthcare")
- Select a preset
- Click Reanalyze to re-detect with new entities
Popular Presets#
| Preset | Entities | Use Case |
|---|---|---|
| Deutschland - Vollständig | 41 | German PII |
| United States - Complete | 31 | US PII |
| Developer Secrets - Complete | 44 | API keys, tokens |
| Healthcare - HIPAA | 22 | Medical data |
| European Union - Complete | 132 | All EU countries |
Entity Categories#
- Personal: Names, addresses, phone numbers, emails
- Government IDs: SSN, passport, driver license, tax ID
- Financial: Credit cards, bank accounts, IBAN
- Healthcare: Medical records, insurance IDs
- Technical: API keys, passwords, connection strings
Settings#
Access settings via the extension popup or options page.
General Settings#
| Setting | Description |
|---|---|
| Default Preset | Preset used for new sites |
| Default Method | Anonymization method (default: Encrypt) |
| Debug Logging | Enable verbose logging |
Per-Site Settings#
| Setting | Description |
|---|---|
| Protection Enabled | Toggle protection for this site |
| Site Preset | Override default preset |
| Auto-protect | Always enable on page load |
Encryption Keys#
Manage encryption keys for reversible anonymization:
- Go to Options > Encryption Keys
- Keys sync from your cloak.business account
- Select default key for new encryptions
Troubleshooting#
Common Issues#
| Problem | Solution |
|---|---|
| Extension not working | Refresh the page after enabling |
| "Unauthorized" error | Check API key in settings |
| Preview not appearing | Ensure protection is enabled for this site |
| No entities detected | Check preset matches content language |
| Decryption not working | Verify encryption key is correct |
Debug Mode#
Enable debug logging for troubleshooting:
- Go to Options > General Settings
- Set Debug logging to Debug
- Open browser console (F12 > Console)
- Reproduce the issue
- Look for
[cloak.business]log entries
Console Commands#
// Enable debug output
window.__ANON_DEBUG__ = true;
// View buffered logs
window.__ANON_LOGS__
// Get connector stats
window.__ANON_STATS__()
// Inspect decryption cache
window.__ANON_CACHE__()
Resetting the Extension#
If issues persist:
- Go to
chrome://extensions - Find cloak.business
- Click Remove
- Reinstall from Chrome Web Store
- Re-enter your API key
FAQ#
Is my data sent to cloak.business servers?#
Text only - your text is sent to cloak.business for PII detection and anonymization. The anonymized text is then sent to the AI service. Documents remain on your device.
Can I use this with other AI services?#
Currently supported: ChatGPT, Claude, Gemini. More services coming soon. Contact support@cloak.business for requests.
Why is there a 3,998 character limit?#
Claude.ai converts longer text into "content blocks" which cannot be intercepted and anonymized. This limit ensures consistent protection.
Does it work with Claude's file uploads?#
No, the extension only protects text messages. For document anonymization, use the cloak.business web app or desktop app.
Can my employer see my original messages?#
If you use an encryption key, only you (with that key) can decrypt the original values. Without the key, no one can reverse the encryption.
How do I use different presets for different contexts?#
You can switch presets in the preview modal before sending each message, or configure per-site defaults in settings.
Why are some entities not detected?#
Check that:
- Your preset includes that entity type
- The text matches expected patterns
- Language setting matches content language
- Confidence threshold isn't too high
Can I add custom entity patterns?#
Custom patterns are supported via the web app and API. The extension uses your account's configured recognizers.
Privacy & Security#
Security Model#
[Your Browser] → [Extension] → [cloak.business API] → [Anonymized Text] → [AI Service]
│ │
│ Only text sent
│ (no screenshots)
│
Documents
stay local
Data Handling#
- API Key: Stored in Chrome's secure storage
- Decryption Cache: Cleared on tab close
- No Logging: Original values never logged
- HTTPS Only: All API calls encrypted
Permissions Explained#
| Permission | Why Needed |
|---|---|
activeTab | Access current tab to intercept messages |
storage | Store API key and preferences |
scripting | Inject content scripts for AI sites |
| Host permissions | Connect to cloak.business API |
Support#
- Documentation: cloak.business/docs
- Email: support@cloak.business
- Issues: Report bugs via the extension's feedback option
Document maintained by cloak.business