You paste JWTs, configs and logs into online tools every day. Do you know where they go?

The 30-second check

  1. Open the tool, press F12 → Network, and clear the list.
  2. Paste fake input and run the tool.
  3. Click any new request → Payload. See your input? It left your machine.

💡 Bonus: click the page itself and find content-security-policy in the response headers. connect-src 'self' means the page can only talk to its own site. Not proof, but a good sign.

Jobs that should pass this check

None of these need a server:

  • 🔒 Redacting a log before you paste it into an AI
  • 📂 Diffing two config files
  • ✅ Verifying a download's SHA-256
  • 🖼️ Turning an image into a data URI 
ERROR payment failed for jane.doe@example.com from 203.0.113.42 → ERROR payment failed for [EMAIL_1] from [IP_1]

I build DevTrove, where all four run in your browser. Go ahead and run the check on it. 😉

Which tool are you checking first? 👇

Built and written with help from AI, reviewed and tested by me.