caviardage

What it does

The app removes the personal data from a deed written in Word. This removal, called redaction, is final, because the app keeps no table that links a value to its replacement.

Everything happens in the browser tab. piighost runs there through Pyodide, a version of Python that runs in the browser. The document is never uploaded, and no account is needed. Only anonymous visit counts leave the tab, such as the steps reached.

It also accepts a PDF that carries its text. The pages of the copy then become pictures, with the values painted over.

How it works

1. You drop a .docx file. Each value will be replaced, as you choose, by a readable label such as [Person 1], by a token or by a black bar.
2. Pending tracked changes are accepted, so no deleted text stays hidden in the file. Comments and metadata are removed by default.
3. Rules find what has a fixed shape, such as an IBAN or a phone number. GLiNER, an AI model that reads free text, finds the names of people, places and organisations. It weighs 349 MB and downloads only once.
4. You check each value found. One answer applies to every occurrence of that value.
5. You read the whole document, passage by passage, for anything the tool missed. Signing stays locked until every passage is read.
6. You download the redacted copy. Its last page is a signed declaration of what was removed, by whom and on what date.

What it does not do

• It does not read images. A scanned document is refused, and a logo, a signature or a stamp is copied as is.
• It does not guarantee anonymity. Your review establishes it, and the declaration states what you did.
• It keeps nothing. After the download, the tab forgets the original file, the values and your answers.