Privacy Policy

This Privacy Policy details the data safety practices and architecture of ScrubBeforeAI (accessible at https://scrubbeforeai.com). Because we value developer privacy and absolute secure boundaries above all else, our data design is simple: we do not collect, transmit, store, or see your data.

1. Client-Side Text Processing

All operations related to log scanning, regex matching, placeholder replacement, and prompt un-redacting occur entirely within your web browser sandbox. No backend API servers, databases, or cloud processing layers are used.

Because we use the native browser JavaScript RegExp engine, the text you paste never leaves your local computer. The redaction engine processes your input in real-time within your browser's memory space, and the results are displayed directly in your browser window without any network transmission.

2. Local Session Map Storage

To restore placeholder tags back into original secrets (the "Un-Redact" process), the application holds a temporary key-value lookup map.

This lookup mapping is stored strictly using browser-level sessionStorage and in-memory React application state.

• Tab Scoped: Session storage is isolated per browser tab. One tab cannot inspect another's key map.
• Auto-Purge: The reversal map is automatically cleared and destroyed when you close the browser tab.
• No Offline Persistence: Unlike localStorage, session data is not permanently written to your disk and is lost upon session termination.
• Encrypted Export: If you choose to export your session map using the export feature, it is encrypted with AES-GCM 256-bit encryption using a password you set. The encrypted file is generated locally and downloaded to your device — it is never uploaded to any server.

3. Data We Do Not Collect

To be explicit about our privacy architecture, here is a comprehensive list of data that ScrubBeforeAI does not collect, transmit, or store:

• Any text, code, or logs you paste into the redaction input panel
• Any redacted output generated by the tool
• Any reversal map contents (the mapping between placeholders and original values)
• Any custom regex patterns you create in the Custom Rules engine
• Any files you process through the File Scrubber
• Your name, email address, or any personal identifiers (unless voluntarily submitted via the Contact form)
• Browser fingerprints, device identifiers, or cross-session tracking data
• Cookies for advertising, retargeting, or behavioral profiling

4. Analytics

We use Google Analytics 4 (GA4) to collect anonymous, aggregated page-view statistics such as page URLs, referrer data, general geographic region, and device type. This helps us understand overall traffic trends and improve the user experience.

Google Analytics does not have access to any text you paste, redact, or process within ScrubBeforeAI. No pasted input data, redacted output, reversal map contents, or custom pattern rules are ever transmitted to Google or any other third party.

We do not use any additional analytical packages, user-session recorders, or event loggers (such as Amplitude, Mixpanel, or Hotjar). We do not fingerprint browsers, store cookies for ad targeting, or track individual user behaviour across sessions.

For more information about how Google processes analytics data, please refer to Google's Privacy Policy.

5. Advertising

ScrubBeforeAI may display advertisements provided by Google AdSense. Google AdSense uses cookies and web beacons to serve ads based on your prior visits to our website or other websites on the internet. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to our site and/or other sites on the Internet.

You may opt out of personalized advertising by visiting Google Ads Settings. Advertising partners do not have access to any text you paste, redact, or process within the ScrubBeforeAI tool.

6. Cookies

ScrubBeforeAI itself does not set any first-party cookies. However, third-party services integrated into our site may set cookies:

• Google Analytics: Sets cookies to distinguish unique users and throttle request rates. These cookies contain no personally identifiable information.
• Google AdSense: May set cookies for ad personalization and frequency capping.

You can control and delete cookies through your browser settings. Disabling cookies will not affect the core functionality of the ScrubBeforeAI redaction tool.

7. Contact Form

If you voluntarily submit a message through our Contact page, the information you provide (name, email, and message) is transmitted securely to our team via Web3Forms, a third-party form delivery service. We use this information solely to respond to your inquiry. We do not add you to any mailing list, and we do not share your contact information with third parties.

8. Children's Privacy

ScrubBeforeAI is a professional developer tool and is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe that a child has provided personal information through our Contact form, please contact us so we can take appropriate action.

9. Compliance and Data Governance

By sanitizing raw codebases and terminal logs locally, developers ensure compliance with GDPR, HIPAA, PCI-DSS, and corporate security guidelines. ScrubBeforeAI serves as a client-side boundary protecting your team from inadvertent data leakages into third-party LLM training logs.

Because no user data is collected or stored by ScrubBeforeAI, there is no personal data to request, modify, or delete under data subject access rights (DSAR) provisions of GDPR or similar regulations.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.

11. Contact for Privacy Inquiries

If you have questions or concerns about this Privacy Policy or our data practices, please reach out through our Contact page.