Preparing the on-device name model…
Masked text
Paste the AI’s reply. Placeholders — Student A, School 1 — turn back into the real names from your map. Pure find-and-replace, entirely on this device.
Restored text
The map file — placeholders, aliases, and your always-flag list — is the only sensitive artifact NameMasker creates. It is what makes Unmask work. Keep it with your student files; it is never transmitted.
How to use it
- Paste your text above, or drop in a PDF or Word document. Files are read on your device and never uploaded.
- Press Mask. Identifying information lights up: names, schools, emails, phone numbers, and passages that might identify the student through context.
- Review the highlights — click any one to approve, edit, or dismiss it. Caught something the scan missed? Select the text and press “Mask this,” or keep an always-flag list of names the scan should never miss. You know the student; the tool does not.
- Copy the masked text and use it with any AI service you like.
- When you get results back, paste them under Unmask. Real names return everywhere the AI kept the placeholders.
- Working with the same student across a season? Export the mapping and import it next session — the same student is always “Student A,” across every document.
Three kinds of flags
- j.rivera@example.org Direct identifiers — emails, phones, ID numbers, dates. Deterministic patterns, near-perfect reliability.
- Maya Chen Names — people, organizations, places, detected by a small language model running on your own device, the way a spell-checker does. Nothing is sent anywhere.
- first wrestling captain Contextual flags — passages with no names that may still identify the student. Flagged for your judgment, never masked automatically.
How you can trust it
First, a promise — from a person, not a company:
I’m Chris Bell, an independent educational consultant. NameMasker is the same masking engine at the heart of the full IEC dashboard I’m building for my own practice — I use it with my own students, and it seemed too useful not to share with the IEC community.
This site does not send your documents anywhere — not to me, not to a server, not to any AI company. Nothing you type or open here leaves your computer. And it’s free, of course.
— Chris
Here’s how that can be true. NameMasker is a website, but it doesn’t work like one. A normal website sends what you type to a server; this page, once loaded, sends nothing anywhere. Every step — finding names, masking them, restoring them — happens in your browser, on your machine. There is no server on the other end. There is nothing to send to.
Most of the work is deliberately old-fashioned: find and replace. “Maya Chen” becomes “Student A” the same way your word processor would do it — no cleverness, perfectly reversible. One part does use AI: finding the names. It’s DistilBERT, a small open-source language model tuned for exactly one skill — spotting names — that your browser downloads once and runs by itself, like a spell-checker. It reads your document on your computer, and nothing is sent out to be read. We name the model on purpose: a named model can be looked up and audited.
A promise is only worth what you can check. Four ways, easiest first:
- Turn off your internet. Load the page, disconnect, and use the tool. It works fully offline because nothing it does requires a server.
- Watch the network. Open your browser’s developer tools and observe that no request carries your text anywhere.
- Read the code. The entire tool is open source under the MIT license — every rule, every model call, every line between your document and your clipboard.
- Trust the incentives. This tool is free, has no accounts, and collects nothing. Its only value is its credibility.
One promise we will not make: NameMasker does not “guarantee anonymity.” No tool honestly can. It catches what software can catch, flags what software can only suspect, and puts you in the approval seat for everything. The review step is the product.
The full threat model — what this tool protects against, what it never does, and what can still go wrong — is written in plain language on the security page.