PrivacyScrubber — PII Redaction for AI Chats

Redact sensitive data and PII locally in your browser before AI chats. Mask names, records, and keys with zero server exposure.

Redact sensitive data and personal information before sending prompts to AI chatbots. PrivacyScrubber masks names, emails, identifiers, medical records, financial figures, and API keys — 100% locally in your browser memory. No servers. No cloud proxies. No data ever leaves your device. Your prompts often contain confidential client names, salaries, patient notes, or credentials. Pasting raw text into third-party AI interfaces exposes sensitive data to external logging and model training. PrivacyScrubber replaces confidential details with safe surrogate tokens (such as [NAME_1], [EMAIL_2]) before prompt submission. When the AI returns its response, click Restore to replace the tokens with your original data locally in one click. Free to use. No account required. Operates seamlessly offline. ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ HOW IT WORKS ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 1. Open your preferred AI chat interface in your browser. 2. Type or paste your prompt into the message box. 3. Click the PrivacyScrubber shield button (or press Alt+Shift+X) to instantly tokenize sensitive entities. 4. Submit your sanitized prompt safely. When the response arrives, click Restore to rehydrate original values locally. ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ WHO IT'S FOR ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ • Healthcare & Clinical Professionals: Mask patient identifiers, medical record numbers, and clinical details before generating summaries or reports. • Finance & Accounting Teams: Redact payment card numbers, banking details, and payroll data while preserving numerical formulas and financial line items. • HR & Talent Acquisition: Anonymize candidate resumes for objective screening by removing candidate names, contact details, and graduation years while keeping skills and accomplishments intact. • Legal Counsel: Protect client identities, contract terms, and privileged case details from third-party data repositories. • Software Engineers & DevOps: Intercept access tokens, secret keys, private SSH keys, and database connection strings before they reach external chat models. • Business & Everyday Users: Protect personal notes, private emails, and confidential communications without disrupting your workflow. ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ CORE CAPABILITIES ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ Direct Prompt Protection: Integrated shield buttons appear right inside major browser-based AI chat interfaces, enabling instant one-click data masking without navigating away. 25 Specialized Industry Profiles: Pre-configured rulesets tailored for healthcare, finance, legal, human resources, IT engineering, and education. Easily switch profiles to match your daily workflow. Offline Document & OCR Processing: Sanitize text files, spreadsheets, and scanned documents in local browser memory. Processing runs entirely on your CPU via WebAssembly. Batch File Processing: Safely sanitize multiple text or table files simultaneously with deterministic token mapping maintained across all files in your local session. Custom Regular Expression Rules: Create custom detection patterns for proprietary project codes, internal employee badges, or organization-specific formats. Secure Team Session Sharing: Collaborate on sanitized prompts across team members using end-to-end encrypted session tokens. The underlying data map remains strictly local. Local Compliance Audit Receipts: Generate downloadable PDF audit certificates documenting masked entity types and verification timestamps for compliance reviews. ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ WHY LOCAL PROCESSING MATTERS ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ Unlike cloud-based security proxies that route your sensitive text through third-party servers, PrivacyScrubber executes all tokenization entirely within your browser's Random Access Memory (RAM): • Ephemeral in-memory processing: Session tokens exist solely in volatile memory and are cleared when the tab closes. • Tab-level isolation: Each browser tab maintains an isolated cryptographic context, preventing cross-tab data leakage. • Fully operational in Airplane Mode: Disconnect your network connection and verify that data redaction continues to operate with zero network requests. ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ BUILT FOR PRIVACY & COMPLIANCE ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ Organizations handling sensitive records must ensure confidential data is never exposed during third-party AI interactions. PrivacyScrubber enforces client-side data masking directly at the browser level: • Zero-Server Architecture: Redaction occurs strictly in local device RAM before prompt submission. • Healthcare & Clinical Workflows: Mask patient identifiers and personal records prior to generating clinical summaries. • Financial & Accounting Governance: Redact cardholder data, banking credentials, and payroll details while preserving numerical values and totals. • Enterprise Audit Receipts: Generate on-device PDF audit certificates documenting data masking actions for your compliance team. ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ KEYBOARD SHORTCUTS ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ • Alt + Shift + P — Open PrivacyScrubber popup • Alt + Shift + X — Redact selected text and copy to clipboard ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ Free for basic usage with core entity redaction. PRO unlocks specialized industry profiles, batch processing, custom regex rules, and offline document parsing. TEAMS enables organization-wide encrypted session sharing. Protect your data at the source before sending prompts to AI.