Won't cards and IDs flag tons of random numbers?

No. Credit cards pass a Luhn mod-10 check, and China IDs pass mod-11-2 checksum plus a birth-date sanity check, so random digit strings are filtered out.

Is my pasted text sent to an AI?

No. This is pure local regex detection; the text never leaves your browser.

Can it detect names and addresses?

Regex excels at structured PII (card numbers, ID numbers, emails). Unstructured data like names and addresses is harder for regex, so combine with manual review.

Files never uploaded · processed in your browser

Automatic PII detection

Scan a PDF or pasted text for emails, SSNs, credit cards, China ID numbers and more

Automatic PII detection runs locally and is designed for verifiable privacy work: process, export, then confirm the sensitive content is gone before sharing.

Redaction proofLOCAL

ProcessExportVerify

Processed in your browserWorks offlinePre-export self-check

Detection categories

Pure local regex detection — text never goes to any AI or server. Credit cards use Luhn and IDs use mod-11-2 checksums to cut false positives.

Operational notes

What this tool proves

Drop a PDF or paste text, and this tool uses purely local regex + checksums to surface personal data: emails, US SSNs, credit/bank card numbers (Luhn-validated to skip random digit strings), China ID numbers (mod-11-2 checksum verified), China mobile numbers, IBANs, IP addresses, and more. Hits are listed so you can redact them next. Zero dependencies, zero uploads, free forever — local regex is actually the most reliable here.

How to use Automatic PII detection

1Drop a PDF or paste text — scanned locally, never uploaded
2Toggle the PII categories to detect
3Review highlighted hits and per-category counts
4Head back to the redaction / masking tools to cover them

Why this tool

The broadest coverage is our edge: most competitors only catch email/phone/credit card; we add China ID mod-11-2 validation and credit-card Luhn checks to cut false positives. Pure local regex — your text never goes to any AI or server.

FAQ

Won't cards and IDs flag tons of random numbers?: No. Credit cards pass a Luhn mod-10 check, and China IDs pass mod-11-2 checksum plus a birth-date sanity check, so random digit strings are filtered out.
Is my pasted text sent to an AI?: No. This is pure local regex detection; the text never leaves your browser.
Can it detect names and addresses?: Regex excels at structured PII (card numbers, ID numbers, emails). Unstructured data like names and addresses is harder for regex, so combine with manual review.

State privacy rights

Deletion laws near this workflow

These source-checked rows connect local redaction and PII cleanup to state privacy deletion rights. The cluster is staged noindex until final legal review.

2026-01-01 · CA

California

DROP consumer request intake begins

2026-01-01 · IN

Indiana

ICDPA takes effect

2026-01-01 · KY

Kentucky

KCDPA takes effect

Updated 2026-06-10 · PrivScrub

Sources, review and limits

Last verified

2026-06-17

Author

RedactCat editorial desk

Reviewer

Privacy workflow review

Primary sources

Local PDF/image parsing and canvas rendering APIs
User-marked redaction regions and export settings
OCR helpers where the page explicitly offers OCR

Redaction is high risk. Always inspect the exported file for hidden text, metadata, layers and missed sensitive information before sharing.