In short
- The validators and test-number generators on this site run entirely in your browser. Nothing you type there is sent anywhere.
- The API and the demo process the text you send in memory to return the redacted result. The text is not stored, and our code does not log it.
- No cookies. Fonts are served from this site, not from a third party. Page views are counted with Cloudflare Web Analytics, which uses no cookies and does not track individual visitors.
What the API processes
When you call /redact (or use the demo), the request body, meaning your text, is analysed in memory and the response
is returned to you. It is not written to a database, a file or a log by our code.
The hosting platform records request metadata for operations and debugging, such as time, response status, duration and the data centre that handled the request. It does not record request or response bodies.
Website analytics
This website counts page views, referrers and countries with Cloudflare Web Analytics. It loads a small script from Cloudflare, sets no cookies, stores nothing in your browser and does not build profiles of individual visitors.
Where it is processed
The API runs on Cloudflare Workers. Each request is handled by the Cloudflare data centre nearest to where it comes from. For requests from Europe that is usually a European data centre, but we cannot guarantee that processing stays inside the EU.
Service providers
- Cloudflare, Inc.: hosting of the API and of this website.
- RapidAPI (Nokia): API keys, plans, billing and the gateway that paid requests pass through on their way to the API. Requests through RapidAPI are subject to RapidAPI's privacy policy.
The public demo is called directly, not through RapidAPI. To enforce its limit of 5 requests per minute, the visitor's IP address is used as a short-lived rate-limit counter key.
Your responsibilities
Redaction reduces the personal data you pass on, but detection is rule-based and not exhaustive: for example, street addresses are not detected yet. If you keep the placeholder map, the redacted text is still pseudonymised personal data in your hands. Assess your own use case, and test on a sample of your real data before relying on it.
Contact
Questions about data processing: use Contact Provider on the RapidAPI listing or open an issue on GitHub.