How PasteToAI Works

PasteToAI is a 100% client-side privacy tool. This means all processing happens in your browser—your data never touches our servers.

The Three-Step Process

1. Paste Your Text

Copy any text you want to check—emails, documents, code snippets, customer data—and paste it into PasteToAI.

2. Automatic Detection

Our detection engine scans your text for 15+ types of sensitive data:

Category	What We Detect
Identity	Names, Social Security Numbers, Driver's License
Contact	Email addresses, phone numbers, physical addresses
Financial	Credit card numbers, bank accounts, routing numbers
Technical	API keys, IP addresses, passwords
Health	Medical record numbers (MRN)

3. One-Click Redaction

Review the highlighted matches and click to redact. Sensitive data is replaced with safe placeholders like [EMAIL] or [PHONE].

Why Client-Side Matters

Traditional Tools (Server-Side)

Your Data → Internet → Their Server → Processing → Internet → Back to You

Risks:

Data transmitted over network (can be intercepted)
Data stored on third-party servers
Subject to server breaches
Company can access your data

PasteToAI (Client-Side)

Your Data → Your Browser → Done

Benefits:

Data never leaves your device
Works offline
No network requests
Nothing to breach on our end
Complete privacy

Technical Architecture

Detection Engine

PasteToAI uses a multi-layered approach:

Pattern Matching - Regular expressions for structured data (emails, SSNs, credit cards)
NLP Analysis - Natural language processing for names and addresses
Contextual Detection - Understanding context to reduce false positives
Entropy Analysis - Detects unknown secrets by measuring randomness

Entropy Detection: Catching Unknown Secrets

Traditional PII tools only find what they're programmed to find. If you paste an internal API key or custom token that doesn't match known patterns, it slips through.

PasteToAI goes further. Our entropy analysis measures how "random" a string looks. High-entropy strings—long sequences of mixed characters without recognizable words—are flagged as potential secrets.

"password123"              → Low entropy  → Normal text
"xK9mN2pQ8rS5tV7wYzB4cD6f" → High entropy → Likely a secret

This catches database passwords, internal tokens, encryption keys, and other secrets that regex patterns would miss.

No External Dependencies

No API calls to external services
No analytics or tracking
No cookies storing your data
Works completely offline after initial page load

What We DON'T Do

Store your data - We have no database, no storage
Send your data anywhere - No network requests with your content
Track your usage - No analytics on what you paste
Require signup - Use instantly, no account needed

Open & Transparent

Our approach is simple: if your data never leaves your browser, it can't be leaked, hacked, or misused.

You can verify this yourself:

Open browser DevTools (F12)
Go to Network tab
Paste text and process it
See that no requests are made with your data