Your source files stay in the browser.
File inputs are read using browser JavaScript and outputs are created locally as downloadable files. The website does not provide an endpoint that receives your selected dataset.
What the server may still see
Like most websites, the hosting server can receive ordinary HTTP requests and technical logs such as IP addresses, timestamps and requested pages. Third-party advertising scripts, if added by the owner, may also process data under their own notices and consent requirements.
Do not paste secrets unnecessarily
Although tools are local-first, still minimize exposure of sensitive customer records on shared or untrusted devices. Your browser extensions or local applications may have access to your screen or system.
No guarantee of compliance
Pattern-based redaction is not complete anonymization. Manually inspect transformed data before disclosure.