SafePaste Privacy Policy for Firefox

Last updated: 16 July 2026

SafePaste is a browser extension that helps users avoid accidentally sending sensitive information, such as API keys, access tokens, private keys, payment details, and personal information.


SafePaste processes text locally in the user's browser. It does not collect, transmit, sell, or share the text it scans.


To provide its core safety features, SafePaste may process the following data locally on the device:

• Text pasted into supported webpage fields.
• Text in a form when the user submits that form.
• Text the user explicitly selects for a manual scan.
• The current website domain, only to apply the user's website-specific rules.

This processing is performed inside the extension and is not sent to SafePaste, the developer, or any third party. Password fields are not read.


SafePaste stores the following data locally in the browser:

• Extension preferences and website-specific rules.
• User-created detection patterns and never-send rules.
• Hashes of permitted non-secret values.
• Anonymous local counters for warnings and anonymization actions.

SafePaste does not store pasted text, form content, selected text, API keys, access tokens, passwords, private keys, payment details, personal data, or detection results.


SafePaste does not collect or transmit:

• Browsing history or clipboard history.
• Website content or form content.
• Authentication information, passwords, API keys, or tokens.
• Analytics, advertising identifiers, cookies, or crash-reporting data.
• Personal information or payment information.

SafePaste does not use remote code.


If a user chooses SafePaste Pro, ExtensionPay and Stripe handle checkout and paid-access status. These services may process payment and account information necessary to complete the purchase and confirm paid access.

SafePaste does not send scanned text, form values, secrets, detection results, browsing activity, or personal content to ExtensionPay or Stripe.


On managed devices, an organization may configure browser policies that specify which categories SafePaste blocks. These policies do not give the organization or SafePaste access to text processed by the extension.


This policy may be updated when SafePaste changes. The current version is published at:

https://watahman.github.io/Safepaste-site/privacy.html


For support, visit:

https://github.com/Watahman/Safepaste-site

Do not share secrets, passwords, API keys, tokens, or personal information in public support requests.