Whatever you paste into a chatbot leaves your device — it can be stored, logged, even read by a human later. So before you hit send, shred the secrets you don't need to share. Let's hunt them down.
Here's a real message a kid might send an AI. The scanner below auto-highlights anything sensitive. Click each glowing bit to replace it with [REDACTED] — or hit the big shred button. Watch the risk meter fall and the token count shrink.
🔵 email 🟣 phone 🔴 API key 🟡 address. The AI only needs to know it's about volcanoes — not where you live!
Redacting on your screen feels safe... but the very first version already left your laptop. Flip the switch to see the raw log a company's server might store — secrets and all.
Three messages, one job: click every sensitive bit — and nothing harmless. Miss one and it leaks; over-shred and the message stops making sense. Get 3 clean sweeps to earn the final badge!
"Just be careful" is a start — but real companies build privacy in so nobody has to remember. Here's how it grows up:
Eyeball every message and delete secrets by hand. ✅ Free, no setup. ⚠️ Humans forget, get lazy, or miss things — one slip and a secret is gone.
A scanner strips out PII automatically before the prompt leaves. ✅ Catches the obvious stuff every time. ⚠️ Regex misses clever or misspelled secrets.
Zero-retention & no-training modes, on-device local models, encryption, and audit logs. ✅ Safest by far. ⚠️ Costs money and takes real setup.
You learned the golden rule of talking to AI: whatever you send leaves your device, so send only what the job needs. You can now spot and shred PII — email, phone, address, API keys — before you ever hit that button.