Sanitize My Data

1. What this tool does

Sanitize My Data is a local-first tool that detects and masks personally identifiable information (PII) in text you provide. The sanitization runs on our backend infrastructure and the result is returned to your browser. We do not store, log, or retain your input text or sanitized output in any database.

2. Data flow

You paste or type text into the app.
The text is sent over HTTPS to our backend API (hosted on HuggingFace Spaces).
The backend runs NER and pattern-matching models in memory and returns the sanitized result.
The result is displayed in your browser. Nothing is written to disk or a database.
When you close or refresh the page, all data is discarded.

The NER models used are open-source models from HuggingFace (e.g. dslim/bert-base-NER). They run as inference-only pipelines with no fine-tuning on user data.

3. Analytics

We use Vercel Web Analytics to understand aggregate usage (page views, interaction patterns). This is cookie-free and does not collect IP addresses or personal identifiers. No cross-site tracking occurs.

Custom events tracked (no PII included in payloads):

sanitize_completed — model used, text size bucket, entity count bucket
export_clicked — export format (md / txt / csv)
model_changed — which model was selected

4. Third-party services

HuggingFace Spaces — backend hosting. See their privacy policy.
Vercel — frontend hosting and analytics. See their privacy policy.

5. Your rights (GDPR)

Because we do not store any personal data, most GDPR data subject rights (access, rectification, erasure, portability) are satisfied by design — there is nothing to access, correct, or delete after your session ends.

If you have questions about this privacy policy, contact us at privacy@calvani.dev.

6. Changes to this policy

We may update this policy as the product evolves. Material changes will be reflected with an updated date above. Continued use of the app constitutes acceptance of the current policy.