You paste JWTs, configs and logs into online tools every day. Do you know where they go?
The 30-second check
- Open the tool, press F12 → Network, and clear the list.
- Paste fake input and run the tool.
- Click any new request → Payload. See your input? It left your machine.
💡 Bonus: click the page itself and find content-security-policy in the response headers. connect-src 'self' means the page can only talk to its own site. Not proof, but a good sign.
Jobs that should pass this check
None of these need a server:
- 🔒 Redacting a log before you paste it into an AI
- 📂 Diffing two config files
- ✅ Verifying a download's SHA-256
- 🖼️ Turning an image into a data URI
ERROR payment failed for jane.doe@example.com from 203.0.113.42
→ ERROR payment failed for [EMAIL_1] from [IP_1]
I build DevTrove, where all four run in your browser. Go ahead and run the check on it. 😉
Which tool are you checking first? 👇
Built and written with help from AI, reviewed and tested by me.
Top comments (0)