Open-source privacy proxy masks PII before prompts reach external AI services