PromptShifu ("the Extension") values your privacy above all. With the introduction of Cloud Sync in v3.1.0, we maintain our commitment to the "Your Drive, Your Data" principle.
1. Data Handling Principle: Decentralized Storage
We do not own, store, or have access to your database.
All data is either stored locally on your device or in your personal Google Drive account. We do not use third-party servers to host your prompt library.
2. Google Drive Integration (Cloud Sync)
To provide cross-device synchronization, PromptShifu utilizes Google Drive:
- Restricted Access (
drive.file): We strictly follow the Principle of Least Privilege. The Extension can ONLY access the specific files and folders it creates (e.g., thePromptShifu_Backupfolder). We have NO access to your other personal files, photos, or documents. - Authentication: We use Google OAuth2 (
identityAPI) to authorize access directly with Google. Your Google password is never seen or stored by us. - Visual Documentation: During sync, the Extension may generate Markdown files and preview images in your Drive to provide a visual catalog. These files are for your personal use and are stored entirely within your Drive.
3. Permissions Usage
identity: Used solely to authenticate your Google account for the sync feature.storage: For local persistence on your browser.activeTab&scripting: For prompt injection into supported AI platforms.- Utility Hosts:
api.qrserver.com(QR generation) andpromptshifu.com(Magic Reverse proxy). Data handled by these services is ephemeral and processed in-memory.
4. API Key & Security
- Encryption: All AI API Keys (OpenAI, Claude, etc.) remain encrypted in your local browser storage and are synced to your Google Drive in an encrypted format.
- No Centralized Server: We have no central database. If you lose access to your local device and have not enabled Google Drive sync, we cannot recover your data.
5. Third-Party Services
Usage of Google Drive is subject to Google's Privacy Policy. Usage of AI platforms (ChatGPT, Claude, etc.) is subject to their respective policies.
Anonymous usage analytics: This website uses Google Analytics (GA4) for anonymous, aggregate usage statistics (such as page views) to improve the product. It never collects, stores, or transmits your prompt content or API keys.
6. Contact Us
常見問題
PromptShifu 如何儲存我的提示詞資料？
所有資料預設儲存在你裝置的瀏覽器本地，或在你啟用同步時寫入你的個人 Google Drive。我們不使用第三方伺服器託管你的提示詞庫。
我的 API 金鑰是否安全？
是的。所有 AI API 金鑰（OpenAI、Claude 等）都以加密形式儲存在瀏覽器本地，並以加密格式同步到你的 Google Drive。
Google Drive 同步會取得我哪些檔案權限？
我們採用最小權限 drive.file 範圍，只能存取 PromptShifu 建立的檔案與資料夾，無法讀取你 Google Drive 中的其他照片、文件或個人檔案。