HR people at my last job were pasting termination letters into ChatGPT — so I built a tool that masks the data before it leaves the browser

A while back I watched an HR manager paste a full termination letter — name,

salary, the reason, everything — into ChatGPT to "make it sound nicer."

No bad intent. It's just faster. But that data went to an external server

with no log that it ever happened, and if that employee ever sues, that

prompt is discoverable.

Companies "solve" this by banning ChatGPT. Which does nothing — people

just switch to their personal accounts on their phone, and now there's

zero visibility.

So I built PromptShielder. The idea:

1. Paste your text → it detects names, emails, salaries, IDs and swaps

   them for tokens like [NAME_1], [EMAIL_1] — entirely in your browser

2. Copy the masked text into ChatGPT/Claude, work as usual

3. Paste the answer back → tokens swap back to the real data locally

The part I'm most proud of: there is no backend. No database, no server

logs, no stored prompts. I physically cannot see what anyone types —

which means there's nothing to breach and no vendor security review

needed. (Architecture writeup: promptshielder.com/security)

It's free to try, no signup: promptshielder.com

Would love honest feedback, especially:

- If you work in HR/recruiting: would your team actually use this, or is

the copy-paste loop too much friction?

- What PII patterns am I most likely missing?

Roast away.