Free tool

Anonymizer

Before you hand a text to an AI.

Paste a text or drop a file: names, e-mails, IP addresses, secrets and identifiers are replaced with tokens such as [PERSON_1]. The AI's answer gets the real names back afterwards.

Nothing leaves your browser: not the text, not the names, not the mapping file — and nothing is kept once you close the tab. How to check

Your text

Drop the file here

Any text file, and .docx, .pptx, .xlsx. The old .doc, .ppt, .xls: save them in the current format first.

Result

The result appears here as soon as you paste a text or drop a file.

The tool does not catch everything: read the result before you share it.

Hidden names

What you chose to hide. The list fills up as you click; you can also add a name here, or remove one.

  • No hidden name yet: click an orange word in the result, or add one below.
Write the list by hand

One rule per line: [TOKEN] = variant ; other variant. Matching ignores case, accents and line breaks, and only takes whole words. The first variant is what restoring puts back. A regular expression: regex: PREFIX = pattern. A line starting with # is a comment.

Settings
Recognised without a list of names
Words in CAPITALS (« DUPONT », « ACME »)
Numbers

Never years, dates, times, versions, ports or error codes. « 1,247 devices » becomes « ~1,200 devices ».

Word, PowerPoint, Excel files

The file's preview thumbnail is always removed.

Reading
Carry on from an earlier workshop

Load an earlier workshop's mapping: the same names get the same tokens again. One mapping per client.

Put the real names back in the AI's answer

Paste the AI's answer — or load it from a file — and each token gets its value back.

Names come back as you first hid them (« Marie » becomes « Marie Dupont » again if that is how it was added).

The mapping is what gets the real names back: keep it on your side, and never share it with the anonymized text.

Details
Empties everything and forgets the hidden names. Closing the tab does the same.

Don't take our word for it

How to check that nothing is sent

A page that claims it sends nothing has not proved it. Your browser can show it.

  1. The Network tab. Open the developer tools (F12), Network tab, tick « Preserve log », then anonymize a text or a file: no request appears after the page has loaded.
  2. Flight mode. Load the page, turn off Wi-Fi or switch to flight mode, then use the tool: it works, since it needs nothing it does not already have.
  3. The browser's refusal. In the Console tab of the developer tools, paste this command, which tries to reach www.lbitcloud.com: fetch("https://www.lbitcloud.com/")

    The browser refuses it before it leaves, with a message quoting the rule connect-src 'none': on this page it forbids any connection a script starts, to any server, ours included. The browser enforces it, not the page's code.

  4. The headers. In the Network tab, click the page itself, then « Response headers »: the Content-Security-Policy rule is there, with connect-src 'none'.
  5. Storage. Application tab (Chrome, Edge) or Storage (Firefox): no cookie, no database, and nothing you typed. At most, the language and theme choice another page of the site remembered — this one writes nothing.

The offline version

The same tool, in a single HTML file: download it once, open it from your disk, and it works without a connection. It no longer depends on what this site serves tomorrow — and you can check that it is the one we publish.

Download the offline version

Its SHA-256 fingerprint:

99d3f44214b1c164be701489233774372a0e32619f38b7601896ec7e4d399d49

Compute the downloaded file's own, and compare:

  • Windows (PowerShell) Get-FileHash .\anonymizer-offline.html -Algorithm SHA256
  • macOS shasum -a 256 anonymizer-offline.html
  • Linux sha256sum anonymizer-offline.html

The source code and the same fingerprint, on GitHub

A fingerprint shown by this site does not protect against a compromised site: that is why it is also published on GitHub, with the code that produces the file. For a sensitive client, keep the checked file on your own intranet.

What stays out of reach

  • The tool does not catch everything. It replaces what you hide and what its patterns recognise; a forgotten name goes through. Read it, and look at the orange words.
  • Your browser's extensions can read the content of a page, this one included. On a shared computer, close the tab when you are done.
  • Pictures are not read. A screenshot in a document keeps what it shows, unless you have it replaced with a grey block — the default setting.
  • The page served tomorrow may differ from today's. The security policy holds for the page in front of you. That is why the offline version above exists: a file you keep, which does not change, and whose fingerprint is published here and on GitHub, with the source code.
  • No promise of compliance. The tool reduces the risk of sharing confidential data; it does not make a document anonymous in the GDPR sense, and the decision to share remains yours.