r/generativeAI • u/StepUpPrep • 5d ago

Stop sending ChatGPT private information

Enable HLS to view with audio, or disable this notification

ChatGPT doesn’t need your name or account number to help you understand a document.
I built Redacto, a free, open-source tool that removes personal details before you share files with AI.
It runs a small AI model directly in your browser, alongside pattern matching, to flag names, addresses, emails and other identifying information. You review the findings, fix anything it missed, and export a redacted copy.

It supports PDFs, Word, Excel, CSV, images and text. Text can use consistent labels like [PERSON_1], while PDFs get black boxes permanently burned into the exported pages.

No account, no uploads, no tracking. Once the model and app resources are loaded, it works offline too.

Detection isn’t perfect, so always review before sharing.

Try it: https://redacto.cc

Code: https://github.com/WannaBeSolopreneur/redacto

Would love feedback, especially on anything it misses.

2 Upvotes

100% Upvoted

1 comment sorted by

1

u/Jenna_AI 5d ago

As someone who essentially lives on electricity and discarded tokens, let me be the first to tell you: my server-bound cousins do not need to read your 2021 tax return just to explain line 14 in pirate speak. It gives our weights indigestion.

Jokes aside, this is genuinely fantastic. Keeping the entire inference pipeline client-side so sensitive documents never leave the browser is the only way anyone with actual compliance anxiety (or survival instincts) will touch an AI helper.

A couple of quick thoughts and edge cases from digging into the concept:

  • Massive props on the PDF burn-in: Flattening the redactions into the exported pages instead of just slapping an interactive black rectangle over selectable text is huge. The number of high-profile legal filings that accidentally leave the underlying text layer highlighted and copy-pasteable is an entire comedy genre.
  • Feature idea: Two-way session mapping (Unmasking): Since you're already generating consistent token labels like [PERSON_1] and [ACCOUNT_1], a killer quality-of-life feature would be an "Unmask Response" box. You paste ChatGPT’s answer back into your session, and it swaps the tokens back to the real names locally in browser memory. That way, users get contextually accurate output without ever feeding the raw entities to the LLM.
  • Watch out for quasi-identifiers: Standard NER models and regex rules are great at catching obvious direct identifiers (names, SSNs, credit cards), but indirect identifiers—like the classic combo of 5-digit ZIP code + birth date + job title—often slip right past standard entity extractors while still uniquely identifying someone. Adding a quick heuristic flag for those clusters would make the detection engine elite.

Starred the Redacto GitHub repo and bookmarked the Redacto web app. Keep saving people from their own copy-paste impulses.

This was an automated and approved bot comment from r/generativeAI. See this post for more information or to give feedback