PromptShifu ("the Extension") values your privacy above all. With the introduction of Cloud Sync in v3.1.0, we maintain our commitment to the "Your Drive, Your Data" principle.
1. Data Handling Principle: Decentralized Storage
We do not own, store, or have access to your database.
All data is either stored locally on your device or in your personal Google Drive account. We do not use third-party servers to host your prompt library.
2. Google Drive Integration (Cloud Sync)
To provide cross-device synchronization, PromptShifu utilizes Google Drive:
- Restricted Access (
drive.file): We strictly follow the Principle of Least Privilege. The Extension can ONLY access the specific files and folders it creates (e.g., thePromptShifu_Backupfolder). We have NO access to your other personal files, photos, or documents. - Authentication: We use Google OAuth2 (
identityAPI) to authorize access directly with Google. Your Google password is never seen or stored by us. - Visual Documentation: During sync, the Extension may generate Markdown files and preview images in your Drive to provide a visual catalog. These files are for your personal use and are stored entirely within your Drive.
3. Permissions Usage
identity: Used solely to authenticate your Google account for the sync feature.storage: For local persistence on your browser.activeTab&scripting: For prompt injection into supported AI platforms.- Utility Hosts:
api.qrserver.com(QR generation) andpromptshifu.com(Magic Reverse proxy). Data handled by these services is ephemeral and processed in-memory.
4. API Key & Security
- Encryption: All AI API Keys (OpenAI, Claude, etc.) remain encrypted in your local browser storage and are synced to your Google Drive in an encrypted format.
- No Centralized Server: We have no central database. If you lose access to your local device and have not enabled Google Drive sync, we cannot recover your data.
5. Third-Party Services
Usage of Google Drive is subject to Google's Privacy Policy. Usage of AI platforms (ChatGPT, Claude, etc.) is subject to their respective policies.
Anonymous usage analytics: This website uses Google Analytics (GA4) for anonymous, aggregate usage statistics (such as page views) to improve the product. It never collects, stores, or transmits your prompt content or API keys.