Question 1

What types of personal data can this tool detect?

Accepted Answer

It detects US Social Security Numbers (SSN), credit and debit card numbers (validated with the Luhn algorithm), IBAN codes, email addresses, international phone numbers, IPv4 and IPv6 addresses, and common API key patterns (AWS, Stripe, Slack, GitHub and generic secret-like tokens). You can toggle each detector on or off.

Question 2

Does this tool send my text to a server?

Accepted Answer

No. All detection and redaction runs entirely in your browser using JavaScript and regular expressions. Nothing is uploaded, stored, or sent anywhere. It works completely offline once the page is loaded.

Question 3

What redaction styles are available?

Accepted Answer

You can fully redact a match (replace with [REDACTED]), partially mask it (keep the first or last few characters visible, like ****-****-****-1234), hash it with SHA-256, or replace it with a token such as [EMAIL_1], [PHONE_2] so you can still track entities without exposing the real value.

Question 4

Is the detection 100% accurate?

Accepted Answer

No regex-based detector is perfect. It may produce false positives (for example, a 9-digit number that is not a real SSN) or miss unusual formats. Always review the output before relying on it for compliance, legal, or security purposes.