Hushframe
Privacy policy · 24 October 2026
Hushframe masks parts of web pages on your screen so you can share your screen, record a demo or take a screenshot without showing private details. It works entirely inside your browser. There is no account, no analytics and no tracking.
What Hushframe reads
On a page where it runs, Hushframe reads the page to decide what to mask: the element you click, and — only if you turn on auto-detect (Pro) — the visible text, which it checks against patterns such as email addresses, phone numbers, money amounts, card numbers, IBANs, API keys and words you add. While a mask is on, the real text inside it is kept in the tab’s memory so it can be put back when you unmask or pause. This happens on your computer. Page content is never sent anywhere and never stored.
What stays on this device
In the browser’s local extension storage, per website: the CSS selector of each element you chose to mask, the element type, a short one-way hash of its text (so the mask can find the element again, without keeping the text), the position and size of any masked areas, whether the tab title should be hidden, and whether you chose “Never run on this site”. Also: your settings (including whether Sharing mode is on), the custom words and patterns you add, which 3 sites use the Free plan, the trial start date, and, if you buy Pro, your license key and its status. Nothing is synced to other devices.
Uninstalling the extension removes all of it. Export (Pro) writes the same data to a JSON file on your computer only when you ask.
The only network request
If you enter a Pro license key, Hushframe asks the payment provider, Dodo Payments, whether the key is valid. That request goes to live.dodopayments.com and sends the key, a device name (“Hushframe”), and after activation the activation id. It sends nothing about the pages you visit or what you masked. The check happens when you activate a key and again about once a week while a key is stored; if you are offline, a valid key keeps working for 14 days. Removing the key releases the activation and deletes the local copy.
The “Buy” buttons open the Dodo checkout page in a normal tab. Payment details go to Dodo, not to Hushframe.
Without a license key Hushframe makes no network requests at all, including during the 7-day trial.
Permissions
- activeTab and scripting — mask the page you are on when you open Hushframe or press its shortcut.
- storage — keep your saved masks and settings on this device.
- A specific site, only if you choose “Remember on this site” — apply that site’s masks automatically as its pages load.
- All sites, only if you turn on “Run on all sites” — the same, on every site, and auto-detect everywhere. Turn it off any time to remove the permission.
- License host, only when you activate a key — contact
live.dodopayments.comas described above. In Firefox this is shown as optional “authentication information” data sharing.
What Hushframe does not do
It does not collect analytics or telemetry, run remote code, run in private/incognito windows, sell or share data, or show advertising. Masking changes only what is on your screen; it does not change what a website receives or stores.
More detail for IT teams: security & data sheet.