How to use
Drop files or click “Choose files” (images, PDFs, docx / xlsx / pptx, text and ZIPs, mixed and several at once). Inspection starts at once and the format is detected from the content, not the extension.
Read the overall verdict (Looks OK to share / Needs review / Dangerous) and the per-file risk list. Severity is High, Medium or Low; anything that could not be checked is marked “Cannot confirm”.
Adjust the options if needed (masking personal information in text, removing PDF comments) and press “Make safe copies”. Only what can be removed automatically is processed, and each copy is re-checked right away.
Look at what was resolved and what remains. Items that need manual work, such as tracked changes or hidden sheets, come with steps.
Download copies one by one or as a ZIP, and save the risk report (CSV / JSON). The report holds file names, paths and the kind and count of each risk, never the values found (names, keys, numbers).
What it does
Looks in the right places per format
Images: GPS, date taken, serial numbers, editing software, embedded thumbnails. PDF: author, JavaScript, attachments, comments, form values, text under black boxes. Office: author, company, template path, custom properties, custom XML, comments (with author names), tracked changes, hidden sheets, rows/columns and defined names, pivot caches, external links, embedded objects, speaker notes, macros. Text: secrets and personal information.
Finds text under black boxes
It reads each PDF page’s drawing commands and looks for opaque dark rectangles drawn after the text that cover most of a character, so a box over one word of a long line is found. Boxes made from images, light-coloured, rotated or curved shapes and PDFs over 100 pages cannot be judged. Clipping is handled only by its bounding box.
Safe copies for what can be removed
Images and PDFs use the same removal as the metadata cleaners; Office files get author, last editor and company emptied and docx comments removed; text gets secrets, e-mail, phone, My Number–style and card numbers (Luhn check) masked; ZIPs are rebuilt without junk and with each entry made safe.
Re-checked after the copy
Each safe copy is inspected again and resolved and remaining items are shown side by side. Things that are not automated, such as accepting tracked changes, remain and come with manual steps.
The verdict is labelled as a guide
The verdict reflects only what could be detected. Information inside pages or images, custom formats and encrypted content are not checked. What could not be checked is “Cannot confirm”, never “safe”, and keeps the verdict at “Needs review”.
Use cases
- Check a quote or report (docx / xlsx) for author names, comments, tracked changes and hidden sheets before sending it to a client
- Remove location, shooting time and camera serial numbers from photos before posting them
- Make sure a PDF you blacked out has no live text underneath before publishing it
- Look for API keys, passwords, e-mail addresses and computer user names in code or logs before sending a ZIP
- Drop __MACOSX, .DS_Store and similar junk from a folder before zipping it
Supported formats
Inspect and make safe copies
Inspect only
Capability matrix
| Feature | Support | Notes |
|---|---|---|
| Detect and remove image location, dates, serials and thumbnails | Supported | JPEG / PNG / WebP. HEIC, TIFF and others are detection only |
| Detect and remove PDF document info, JavaScript, attachments and comments | Supported | — |
| Detect text left under PDF black boxes | Partial | Opaque dark rectangles only (several per path are fine). Image-based boxes, light-coloured, rotated or curved shapes and PDFs over 100 pages cannot be confirmed |
| Empty Office author / company / template path / custom properties; remove docx comments | Supported | — |
| Detect custom XML, hidden defined names and comment author names | Partial | Detection only. Remove them in Office (deleting the comments also removes the author names) |
| Detect tracked changes, hidden sheets, macros, pivots and notes | Supported | Removal is manual (accept or delete them in Office) |
| Remove xlsx / pptx comments | Not supported | Detection only. Delete them in Office |
| Detect and mask secrets and personal information in text | Supported | Heuristic. Misses and false positives happen |
| Inspect and rebuild ZIPs | Partial | One level. Nested ZIPs and encrypted files cannot be confirmed |
| Detect faces or text shown inside images or PDFs (OCR) | Not supported | — |
| Virus scanning | Not supported | — |
Limits & notes
- Up to 50 files at a time, 100 MB per file, processed one at a time.
- ZIPs are inspected one level deep (200 entries, 50 MB per entry, 300 MB unpacked in total). Anything beyond that, and nested ZIPs, is “Cannot confirm”.
- Text is inspected up to 5 MB; larger files get no safe copy.
- The black-box check covers the first 100 pages of a PDF. Image-based boxes, light-coloured rectangles, rotated or curved shapes are not judged.
- The verdict is a guide and cannot find every risk. Information inside pages or images, custom formats and encrypted content are not checked.
- Accepting tracked changes, deleting hidden sheets, removing macros, deleting xlsx / pptx comments and applying redactions are not automated.
Privacy & safety
Reading, inspecting, rewriting and zipping all happen in your browser. Files, their contents and names are never sent to or stored on a server, and the values found are never recorded in analytics.
FAQ
What should I check before sending a file?
Can text still be read under a PDF black box?
Does “Looks OK to share” mean it is safe?
Can it remove Word tracked changes and comments?
Does it look inside ZIPs?
Are my files uploaded?
Related tools
Crypto Studio — Hash, HMAC, Encryption & Keys
Type text and see 12 hashes — SHA-256, SHA-3, BLAKE3 and more — at once. Verify webhook HMAC signatures, encrypt text with a password, generate key pairs and create or check bcrypt hashes, all on your own device with nothing uploaded.
Password Studio — Generator & Strength Checker
A strong 20-character password is ready when the page opens. Fine-tune symbols and excluded characters, switch to a memorable passphrase, or check a password you already use — all without sending anything off your device.
Secret Scanner
Paste text or drop config and code files to list likely secrets with file, line and rule before you publish or share them. Values are masked by default and you can save a copy with them replaced by ***. A helper only — it cannot guarantee that nothing is missed.
Last updated: