About

PromptScrub is a free tool that finds sensitive details in text and redacts them before you paste that text into ChatGPT, Claude, Gemini or any other AI chat.

Why this exists

AI assistants are genuinely useful for rewriting an email, summarising a meeting, or explaining an error log. The problem is what travels along with the request. A support transcript carries customer email addresses. A stack trace carries an API key. A config file carries a database password on the line above the part you actually wanted help with.

Most of the time nobody intends to share any of it. It is simply attached to the text you copied, and once it has been sent, it has been sent.

How it works

Paste your text into the box on the home page. PromptScrub scans it against a fixed set of pattern rules: email addresses, phone numbers, API keys and tokens, JWTs, private key blocks, internal hostnames and IP addresses, password assignments, and optionally credit card numbers. It then shows you exactly what it found. You choose how each match is handled, then copy the cleaned version.

You can turn any rule off. If you want the AI to see your own email address, that is your call to make, and the tool does not argue with you.

Your text never leaves your browser

This is the part that matters most, so it is worth being precise about it. Detection and redaction run as JavaScript inside the page you are viewing. There is no upload endpoint. Your text is never transmitted, never stored, and never logged, not on our servers and not anywhere else.

You do not have to take our word for it. Open your browser's developer tools, switch to the Network tab, and paste something into the tool. No request carries your text. The detection rules themselves are plain, readable JavaScript served with the page, so you can inspect exactly what is being matched.

What it does not do

Pattern matching recognises shapes, not meaning. PromptScrub can find something formatted like an API key. It cannot know that a project code name is confidential, that a figure is unreleased, or that a contract is under NDA. That judgement stays with you, which is why the home page carries a short manual checklist alongside the tool.

PromptScrub is a practical safeguard against accidental disclosure. It is not a compliance product and it does not certify that any given text is safe to share.

Get in touch

Questions, bug reports, or a pattern you think we should detect? Email [email protected]. Suggestions for new detection rules are especially welcome.