Hidden Tokens browser extension: privacy
Updated 24 October 2026 · publisher: Ai4x · contact: info@ai4x.academy
The “Hidden Tokens — AI privacy lock” extension encodes, on your computer, the messages you write to ChatGPT, Claude, Gemini and Copilot before they are sent, and translates the codes in the replies back on screen. It works with the Hidden Tokens app installed on the same computer.
In one sentence
The extension sends nothing to Hidden Tokens, to Ai4x or to any third party. It only talks to the Hidden Tokens app on your computer, at http://127.0.0.1, which never leaves the machine.
What it reads, and why
| Data | Why | Where it goes |
|---|---|---|
| The text of a message, when you send it, on chatgpt.com, chat.openai.com, claude.ai, gemini.google.com, copilot.microsoft.com, m365.cloud.microsoft and copilot.cloud.microsoft | To have it encoded (names, identifiers and amounts become NAME-001, COMPANY-003…) before it is sent | To the Hidden Tokens app on your computer (127.0.0.1). The AI site then receives the encoded text, as if you had typed it. |
| Codes (NAME-001…) displayed on the page | To translate them back on screen | To the app on your computer, which returns the values of those codes only. Values are shown only in your tab. |
| The address of the page where you send a message | For the app's local log (“which message, to which site”) | To the app on your computer, in its local log. |
The extension does not read other sites, your history or your attachments. It uses no cookies, no analytics and no advertising.
What it keeps
In the browser's local storage, on this computer only: the pairing code, the app's port, the chosen folder and the “hold / let through” setting. Nothing else. Uninstalling the extension erases them. Encoded messages, the encoding key and the log are kept by the Hidden Tokens app on your disk; we have no access to them.
What we do not do
We do not sell, rent or transfer any data. We do not use data for any purpose other than the extension's single purpose, nor to determine creditworthiness or for lending. No one at Ai4x reads your messages: they never reach us.
Organisation deployment
An organisation can force-install the extension through Chrome policy and enforce its settings (hold the message if the app does not respond, the app's port). These settings arrive through the browser; they contain no personal data.
Your rights, contact
The data stays on your computer, so you keep full control of it.
info@ai4x.academy · Ai4x general policy: ai4x.academy/privacy-policy.