About CleanVault

Why this exists

Everyone who works with data eventually needs to clean it, convert it, decode it or compare it. The tools for doing that are everywhere and mostly free, and almost all of them work the same way: you paste your data into a form, it is sent to a server, and the answer comes back.

That is a perfectly reasonable way to build a web application, and it is fine for test data. It is not fine for a production JWT, a customer export, an API response with a bearer token in it, or a contract under NDA — because the moment that content leaves your browser it exists on infrastructure you do not control, under a retention policy you have not read. Most people do it anyway, because the tool is right there and the risk is invisible.

CleanVault is the same set of tools with that step removed.

How it works

Every transformation on this site runs in your browser, in plain JavaScript, on the page you are looking at. Hashing uses the browser's native SubtleCrypto; random identifiers use crypto.getRandomValues(); files you drag in are read with FileReader. There is no API. There is no endpoint that accepts your input, which means there is nothing to log and nothing to breach.

You do not have to take that on trust, and you shouldn't. Open your developer tools, watch the Network tab, and use any tool on the site. The counter in the header shows the same thing: first-party requests since the page loaded, which stays at zero. The full technical explanation is here.

How it's paid for

CleanVault is free and has no paid tier. It is funded by advertising, and we would rather say that plainly on this page than bury it.

Two commitments follow from it. Ads appear below the content on a page, never inside a tool's controls — partly because Google's own placement rules require distance from interactive elements, and partly because an ad next to a Copy button is a bad experience regardless of the rules. And advertising has no access to what you type: that content never leaves the page, so there is nothing for an ad script to read.

Who's behind it

CleanVault is built and maintained by Khamis M. B. in Dubai, United Arab Emirates. It is a small independent project, not a company with a support desk — which is why the contact address is a real inbox and replies take two or three days rather than two minutes.

Bug reports are genuinely welcome, and so is scepticism about the privacy claims. If you test them and find something that does not hold up, please write: hello@cleanvault.io.