PromptShifu ("the Extension") values your privacy above all. With the introduction of Cloud Sync in v3.1.0, we maintain our commitment to the "Your Drive, Your Data" principle.
1. Data Handling Principle: Decentralized Storage
We do not own, store, or have access to your database.
All data is either stored locally on your device or in your personal Google Drive account. We do not use third-party servers to host your prompt library.
2. Google Drive Integration (Cloud Sync)
To provide cross-device synchronization, PromptShifu utilizes Google Drive:
- Restricted Access (
drive.file): We strictly follow the Principle of Least Privilege. The Extension can ONLY access the specific files and folders it creates (e.g., thePromptShifu_Backupfolder). We have NO access to your other personal files, photos, or documents. - Authentication: We use Google OAuth2 (
identityAPI) to authorize access directly with Google. Your Google password is never seen or stored by us. - Visual Documentation: During sync, the Extension may generate Markdown files and preview images in your Drive to provide a visual catalog. These files are for your personal use and are stored entirely within your Drive.
3. Permissions Usage
identity: Used solely to authenticate your Google account for the sync feature.storage: For local persistence on your browser.activeTab&scripting: For prompt injection into supported AI platforms.- Utility Hosts:
api.qrserver.com(QR generation) andpromptshifu.com(Magic Reverse proxy). Data handled by these services is ephemeral and processed in-memory.
4. API Key & Security
- Encryption: All AI API Keys (OpenAI, Claude, etc.) remain encrypted in your local browser storage and are synced to your Google Drive in an encrypted format.
- No Centralized Server: We have no central database. If you lose access to your local device and have not enabled Google Drive sync, we cannot recover your data.
5. Third-Party Services
Usage of Google Drive is subject to Google's Privacy Policy. Usage of AI platforms (ChatGPT, Claude, etc.) is subject to their respective policies.
Anonymous usage analytics: This website uses Google Analytics (GA4) for anonymous, aggregate usage statistics (such as page views) to improve the product. It never collects, stores, or transmits your prompt content or API keys.
6. Contact Us
Frequently Asked Questions
How does PromptShifu store my prompt data?
All data is stored locally in your browser on your device by default, or written to your personal Google Drive when you enable sync. We do not use third-party servers to host your prompt library.
Is my API key secure?
Yes. All AI API keys (OpenAI, Claude, etc.) are stored encrypted in your local browser and synced to your Google Drive in an encrypted format.
What file permissions does Google Drive sync get?
We use the minimal drive.file scope, which can only access files and folders created by PromptShifu. It cannot read your other photos, documents, or personal files in Google Drive.