PromptShifu ("the Extension") values your privacy above all. With the introduction of Cloud Sync in v3.1.0, we maintain our commitment to the "Your Drive, Your Data" principle.
Data Controller & Operator
The data controller and operator of PromptShifu is PromptShifu Open Source Project & Studio (Led by Founder & Lead Engineer Chen Yuan). As a local-first project, we do not operate a central server that stores your prompt library; this statement identifies the entity accountable for privacy and data-protection matters.
For any privacy question, data-access request, or deletion inquiry, contact our dedicated privacy line at privacy@promptshifu.com. We respond to privacy matters within 48 hours.
1. Data Handling Principle: Decentralized Storage
We do not own, store, or have access to your database.
All data is either stored locally on your device or in your personal Google Drive account. We do not use third-party servers to host your prompt library.
2. Google Drive Integration (Cloud Sync)
To provide cross-device synchronization, PromptShifu utilizes Google Drive:
- Restricted Access (
drive.file): We strictly follow the Principle of Least Privilege. The Extension can ONLY access the specific files and folders it creates (e.g., thePromptShifu_Backupfolder). We have NO access to your other personal files, photos, or documents. - Authentication: We use Google OAuth2 (
identityAPI) to authorize access directly with Google. Your Google password is never seen or stored by us. - Visual Documentation: During sync, the Extension may generate Markdown files and preview images in your Drive to provide a visual catalog. These files are for your personal use and are stored entirely within your Drive.
Google API Services User Data Policy. PromptShifu's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Your prompt data is stored solely in your personal Google Drive (drive.file scope) and is never transmitted to, logged, or shared with external servers.
3. Permissions Usage
identity: Used solely to authenticate your Google account for the sync feature.storage: For local persistence on your browser.activeTab&scripting: For prompt injection into supported AI platforms.- Utility Hosts:
api.qrserver.com(QR generation) andpromptshifu.com(Magic Reverse proxy). Data handled by these services is ephemeral and processed in-memory.
4. API Key & Security
- Encryption: All AI API Keys (OpenAI, Claude, etc.) remain encrypted in your local browser storage and are synced to your Google Drive in an encrypted format.
- No Centralized Server: We have no central database. If you lose access to your local device and have not enabled Google Drive sync, we cannot recover your data.
5. Third-Party Services
Usage of Google Drive is subject to Google's Privacy Policy. Usage of AI platforms (ChatGPT, Claude, etc.) is subject to their respective policies.
Anonymous usage analytics: This website uses Google Analytics (GA4) for anonymous, aggregate usage statistics (such as page views) to improve the product. It never collects, stores, or transmits your prompt content or API keys.
6. Contact Us
For privacy matters, data-access or deletion requests, contact privacy@promptshifu.com — we respond within 48 hours. For general support, contact support@promptshifu.com.
Frequently Asked Questions
How does PromptShifu store my prompt data?
All data is stored locally in your browser on your device by default, or written to your personal Google Drive when you enable sync. We do not use third-party servers to host your prompt library.
Is my API key secure?
Yes. All AI API keys (OpenAI, Claude, etc.) are stored encrypted in your local browser and synced to your Google Drive in an encrypted format.
What file permissions does Google Drive sync get?
We use the minimal drive.file scope, which can only access files and folders created by PromptShifu. It cannot read your other photos, documents, or personal files in Google Drive.