Privacy

What happens to the text you paste

Nothing leaves your browser. The cleaning engine is a single JavaScript file that runs locally. When you paste text, it is held in memory on your own machine, processed there, and discarded when you close or reload the tab. It is never transmitted, never written to a database, and never seen by anyone.

How to verify that claim

Do not take our word for it. Two ways to check in under a minute:

• Go offline. Load this page, disconnect from the internet, then paste and clean your text. It works exactly the same, because there is nothing to call.
• Watch the network tab. Open your browser developer tools, switch to Network, and use the tool. You will see the page, the stylesheet and the script load once. After that, no requests.

Cookies and storage

This site sets no cookies. It writes nothing to local storage or session storage. There is no consent banner because there is nothing to consent to.

Analytics

If privacy-respecting, cookieless analytics are added later, they will count page views only. No analytics product will ever receive the content of your text, and this page will be updated before any such change goes live.

Accounts and payment

There are no accounts, no logins and no payments. Nothing is collected because nothing is asked for.

Files you upload

The "Upload a file" button uses your browser's local file reader. The file is read into memory on your device and is not transmitted anywhere. It behaves identically to pasting the contents by hand.

Hosting

The site is served as static files by Cloudflare Pages. Like any web host, Cloudflare processes standard request data such as IP address and user agent in order to deliver the page and block abuse. That is request metadata for the page itself, and it never includes the text you paste into the tool.

How to raise a privacy question

This site publishes no contact address, and that is deliberate rather than an omission. A privacy contact exists so you can ask what data is held about you, request a copy, or have it deleted. None of those requests apply here, because nothing about you is collected in the first place: no account, no cookie, no analytics, no log of your text, and no server that ever receives it.

Verify that rather than take it on trust. The two checks above take under a minute each, and they are stronger evidence than any reply we could send you. Load the page, disconnect from the internet, and clean your text anyway. Or open your browser's Network tab and watch: the page, the stylesheet and the scripts load once, and nothing goes out after that. The Content-Security-Policy on every response sets connect-src 'none', which means the browser itself will block this page from making a network request, whatever its code tries to do.

If you find a bug, the honest answer is that we would like to know and currently have no good way for you to tell us. That is a real gap and it is listed as one.

Last updated: 15 August 2026.