Tracehold Free by Tracehold

Stops passwords, API keys and personal data from reaching ChatGPT, Claude or Gemini. Local analysis; only anonymous stats.

Experimental

0 (0 reviews)

1 User

Download Firefox and get the extension

Download file

About this extension

Tracehold is a privacy guardian for when you use artificial intelligence.

How many times have you pasted text into ChatGPT without checking what was in it? A password, an API key, a customer email, a card number… Once sent, there is no way back.

Tracehold Free analyzes what you write BEFORE you press Enter and, if it detects sensitive data, blocks the send and warns you. You get one last chance to remove that data before sharing it with an AI.

Analysis happens in your browser and your content never leaves your device. Tracehold Free has no account, needs no sign-up and does not send the content of your messages to any server. Text analysis runs 100% in your browser. The detection ruleset ships inside the extension package (it is not downloaded over the network). The only connections to app.tracehold.com are anonymous: a statistics ping (at most once every 12 hours), small batches of anonymous scan events, an optional "Is this a false positive?" report you send explicitly, a service-configuration lookup (URLs only, no identifiers) and a single anonymous uninstall notice. None of them include the text of your messages. Your data is never used to train models.

WHAT IT DETECTS
• Passwords and secrets: variables like PASSWORD=, SECRET=, API_KEY=, .env files.
• Vendor keys: AWS, Google, GitHub, OpenAI, Stripe, Slack and similar.
• Tokens and certificates: JWT, private keys (-----BEGIN PRIVATE KEY-----).
• Connection strings with user and password (protocol://user:password@host).
• Personal data: credit cards (validated), IBAN, national IDs, emails and
phone numbers.

WHERE IT WORKS
Tracehold Free activates on the supported AI assistants — 46 provider
families, including ChatGPT, Claude, Gemini, Microsoft Copilot, GitHub
Copilot, Perplexity, Mistral, Grok, DeepSeek, Poe, Meta AI, Notion AI,
HuggingFace Chat, Grammarly, QuillBot and many more — and recognizes a
curated catalog of ~2,460 AI domains. The detector loads on any page but
unloads itself instantly except on recognized AI assistants; network access
stays limited to the providers listed in the manifest (no <all_urls>).

HOW IT WORKS
1. Install Tracehold Free and open your favorite AI.
2. Write or paste your message as usual.
3. If there is sensitive data, Tracehold blocks the send and shows it to you.
You decide: edit the message or send it anyway.

No configuration, no buttons to press. It works from the first minute.

Rated 0 by 0 reviewers

Permissions and data

Required permissions:

Display notifications to you
Access your data for all websites

Optional permissions:

Access your data for sites in the tracehold.com domain
Access your data for chatgpt.com
Access your data for chat.openai.com
Access your data for claude.ai
Access your data for gemini.google.com
Access your data for copilot.microsoft.com
Access your data for copilot.cloud.microsoft
Access your data for perplexity.ai
Access your data for you.com
Access your data for mistral.ai
Access your data for chat.mistral.ai
Access your data for grok.com
Access your data for x.ai
Access your data for chat.deepseek.com
Access your data for deepseek.com
Access your data for poe.com
Access your data for qianwen.com
Access your data for www.qianwen.com
Access your data for quillbot.com
Access your data for www.quillbot.com
Access your data for github.com
Access your data for paraphraser.io
Access your data for spinbot.com
Access your data for prepostseo.com
Access your data for editpad.org
Access your data for wordtune.com
Access your data for grammarly.com
Access your data for app.grammarly.com
Access your data for notion.so
Access your data for www.notion.so
Access your data for notion.com
Access your data for character.ai
Access your data for pi.ai
Access your data for heypi.com
Access your data for gamma.app
Access your data for coda.io
Access your data for huggingface.co
Access your data for huggingface.chat
Access your data for phind.com
Access your data for chat.qwen.ai
Access your data for tongyi.aliyun.com
Access your data for kimi.com
Access your data for doubao.com
Access your data for chatglm.cn
Access your data for chat.z.ai
Access your data for lovable.dev
Access your data for v0.dev
Access your data for bolt.new
Access your data for meta.ai
Access your data for www.meta.ai
Access your data for coral.cohere.com
Access your data for www.kimi.com
Access your data for groq.com
Access your data for chat.groq.com
Access your data for www.phind.com
Access your data for chat.reka.ai
Access your data for www.doubao.com
Access your data for yiyan.baidu.com
Access your data for xinghuo.xfyun.cn
Access your data for v0.app
Access your data for blackbox.ai
Access your data for www.blackbox.ai
Access your data for typingmind.com
Access your data for aistudio.google.com
Access your data for notebooklm.google.com
Access your data for platform.openai.com
Access your data for console.anthropic.com
Access your data for suno.com
Access your data for ideogram.ai
Access your data for krea.ai
Access your data for www.krea.ai
Access your data for app.leonardo.ai
Access your data for elevenlabs.io
Access your data for app.jasper.ai
Access your data for app.copy.ai
Access your data for writesonic.com
Access your data for app.glean.com

Data collection:

The developer says this extension doesn't require data collection.

Optional data collection, according to the developer:

Technical and interaction data
Website content