There is no upload endpoint — your files are processed in this browser tab. Open your network tab and check. See how it stays private.
How to scrub PII from a dataset
- Add a file. Drop the CSV, JSON, or Excel file to clean.
- Detect identifiers. The tool flags emails, phones, SSNs, cards, and IPs.
- Choose a method. Mask, hash with SHA-256, or HMAC with a local salt per field.
- Export. Download the scrubbed data plus a counts-only audit receipt.
Sharing a dataset for analysis or support usually means removing the personal data first — but pasting it into an online scrubber defeats the purpose. This tool finds identifiers and transforms them on your device, with a counts-only receipt so you can show what was changed without exposing the values.
Hashing and HMAC preserve the ability to join or count while removing the raw value; masking removes it outright. For a healthcare-specific pass, use the HIPAA checklist; to profile the data first, use the Data profiler.
Frequently asked questions
What counts as PII here?
Common identifiers — email addresses, phone numbers, SSNs, credit-card numbers, and IP addresses — detected by pattern across your columns and cells.
Should I mask or hash?
Mask when the value should be unreadable, hash (SHA-256) when you still need to match records, and HMAC with a salt when you want consistent pseudonyms that resist reversal.
Is my data uploaded to scrub it?
No. Detection and hashing use Web Crypto on your device, so the sensitive rows never leave the browser — the whole point of scrubbing locally.