No. Reading, detection and replacement run in your browser. Only the number of rows and a one-way hash of the file are sent, to count rows for your plan.

How are the pseudonyms made?

With HMAC-SHA256 and a random 256-bit secret that is saved in the key file. Without the secret, a pseudonym cannot be recomputed from a guessed value, unlike a plain hash of an SSN or phone number.

Is the result anonymous?

Removed and generalized columns can make a file anonymous. Pseudonymized data is still personal data for anyone who has the key file, so keep the key file away from whoever receives the data.

Without an account you can process 1,000 rows a month, with a free account 10,000 rows a month. Starter is about $14 a month for 250,000 rows, Pro about $33 for 5,000,000. Restoring is free.

Data anonymization

Anonymize spreadsheets without uploading them

Find names, emails, phone numbers, SSNs, card numbers and addresses in CSV and Excel files and replace them with consistent pseudonyms, masks or ranges. Everything runs in your browser.

Drop a CSV or Excel file

Or click to choose. Up to 200 MB; the file is processed on this computer and never uploaded.

Use the pseudonyms of an earlier file (load its key file)

Open the file

A CSV or Excel export, up to 200 MB. It is read on this computer; nothing is uploaded.

Check the columns

Columns with names, emails, phone numbers, SSNs, card numbers, addresses and dates of birth are found and get a suggested action. Change any of them.

Download

The anonymized file in the same format, and a key file that can undo the pseudonyms. Keep the two apart.

What it does

Pseudonymize

Each distinct value gets one stand-in, the same in every row and in every file processed with the same key. Emails become addresses at example.invalid, which never receive mail.

Mask

The last four digits of SSNs, card, phone and account numbers, the domain of an email, the initials of a name. Format and separators stay.

Generalize

Dates of birth to the year, ZIP codes to the first three digits, ages and amounts to ranges.

Shift dates

Every date moves by the same number of days from the key, so the intervals between dates stay right.

Scan free text

Emails, phone numbers, SSNs, card numbers, IBANs, IP addresses and names inside notes and comments, replaced with the same pseudonyms as in their own columns.

Restore

With the key file, pseudonyms in a file that comes back, for example with a vendor's results added, are replaced by the original values.

Useful after anonymizing

Removing every column with personal data is safe and makes the file useless. Pseudonyms keep it useful: the same customer is the same code in the orders file and the support file, duplicates are still duplicates, and counts per person still add up. What the recipient cannot do is tell who anyone is. Detection is a suggestion; the preview shows exactly what will be in the file before it is written.

Pricing

Free

10,000 rows a month

Without an account: 1,000 rows a month to try

Create free account

✓CSV and Excel files
✓Names, emails, phones, SSNs, cards, IBANs, addresses
✓Consistent pseudonyms across files
✓Key file to restore originals
✓Free-text scanning
✓Files never leave your browser

Prices in USD are approximate. Checkout charges the exact amount in USD at Stripe’s exchange rate (a 2–4% conversion fee is included), or in euros if you prefer. No VAT or sales tax is added. Monthly, cancel any month. A row is one data row below the header; the same file is counted once, and restoring is free.

Questions

Is my file uploaded?: No. Reading, detection and replacement run in your browser. Only the number of rows and a one-way hash of the file are sent, to count rows for your plan.
How are the pseudonyms made?: With HMAC-SHA256 and a random 256-bit secret that is saved in the key file. Without the secret, a pseudonym cannot be recomputed from a guessed value, unlike a plain hash of an SSN or phone number.
Is the result anonymous?: Removed and generalized columns can make a file anonymous. Pseudonymized data is still personal data for anyone who has the key file, so keep the key file away from whoever receives the data.
What does it cost?: Without an account you can process 1,000 rows a month, with a free account 10,000 rows a month. Starter is about $14 a month for 250,000 rows, Pro about $33 for 5,000,000. Restoring is free.