PageMate — Auto-Redact Screenshots

About

Take screenshots without leaking sensitive data.

PageMate captures any region, window, full page, or element on the page and then automatically redacts the sensitive bits before you share. Emails, credit cards, API keys, SSNs, medical record numbers, Aadhaar, NHS numbers, phone numbers, JWTs, passwords in env files, and 20+ more patterns are detected using checksum validation (Luhn, mod-11, Verhoeff, ISO 3779) so you don't get cluttered with false positives.

EVERYTHING RUNS ON YOUR DEVICE
PageMate has no server. Captures never leave your browser unless you explicitly export, copy, or download them. No analytics, no tracking, no account required. Works offline.

7 WAYS TO CAPTURE
- Drag-to-select region (Alt+Shift+Y) — hold Enter while releasing to save direct to disk
- Quick snap full tab (Alt+Shift+G) — straight to Downloads
- Full scrolling page — overlap-blend stitching, lazy-load pre-warm, sticky-element hiding
- Choose Window — any monitor, app window, or Chrome tab via native picker
- Pick Element — dev-tools-style hover picker, up/down to walk parent/child
- Right-click element / scrollable area — context-menu shortcuts
- 3-2-1 timer — on-page countdown for setting up the shot

AUTO-REDACTION OUT OF THE BOX
- 25+ built-in detectors: email, phone, credit card, API keys (sk_/pk_/ghp_/AKIA/OpenAI), JWT, IBAN, IP, password values
- PII: US SSN, EIN, passport, driver's license, DOB, Aadhaar, NHS Number, Canadian SIN, VIN
- PHI: Medical Record Number, NPI, DEA
- Domain profiles for WhatsApp chat list & payment-card fields
- Form-field scanning (matches inside input / textarea)
- Cross-origin iframe + shadow-DOM aware — works on Gmail message bodies, embedded chat, Notion, Slack
- Per-category toggles + per-domain whitelist for dev / docs sites

POWERFUL EDITOR
- Color Box, pixelate, blur, highlight, arrow, line, numbered step, text, crop, insert image
- Redact in any colour — a solid colour box, or a coloured outline on blur/pixelate
- Redact in any shape (rectangle, rounded, ellipse, circle)
- 10 fonts, colour presets + recent colours, double-click to edit text
- Alignment guides snap to image / annotation edges + centres
- Show Original toggle to see the raw screenshot underneath
- Hover any redaction to see "Email · high" / "Credit card · high"
- Side panel lists every annotation — click to select, x to delete
- Paste or drag-drop an external image to annotate it
- Export PNG, JPG, WebP, or single-page PDF; copy to clipboard
- Undo/redo crops + every annotation through one history stack

HISTORY GALLERY
The most recent 10 captures are saved locally (IndexedDB) — re-open any of them in the editor. Unlimited history is a Pro feature.

KEYBOARD SHORTCUTS (rebindable in chrome://extensions/shortcuts)
- Alt+Shift+R: open popup
- Alt+Shift+Y: capture region
- Alt+Shift+G: quick snap (full tab to disk)
- Alt+Shift+E: re-open last capture in editor

PRIVACY
PageMate is offline by default. The Free tier makes zero outbound network calls — full audit in the privacy policy linked below.

ABOUT "Read and change all your data on all websites"
Chrome shows this permission when you install PageMate. It sounds alarming, but it's the same string shown for every password manager, ad blocker, screenshot tool, and translator on the Web Store — Chrome can't customize the wording per extension.

What it lets PageMate do:
- Read visible text on the page during a capture, so the auto-redactor can find emails / cards / SSNs / API keys before they end up in your screenshot.
- Enumerate the frames in the tab you're capturing (one-shot, at capture time) so redaction reaches cross-origin iframes like embedded chat or docs.
- Inject a small (~40 KB) content script that draws the region picker, element picker, and full-page-capture overlays.

What PageMate does NOT do with this permission:
- Does NOT send your page content anywhere (Free tier = zero outbound calls)
- Does NOT read your cookies (we don't request the cookies permission)
- Does NOT read your browsing history (we don't request history)
- Does NOT watch your network traffic (we don't request webRequest)
- Does NOT read your bookmarks, passwords, or identity
- Does NOT track you across sites — no analytics, no telemetry, no server

Full audit + manifest: see the privacy policy and the source on GitHub.

Built by an indie developer in Kathmandu, Nepal.