Free · for anyone who uses artificial intelligence

What not to paste into artificial intelligence.

100% freeNo sign-upsNo trackingKeeps working with the internet off

Everything you type or paste into an artificial intelligence goes to the company that runs it. This is true of every artificial intelligence, whichever company runs it and whichever country it is in: ChatGPT, Gemini, Claude, Copilot, Meta Artificial Intelligence, Grok, DeepSeek, Qwen and the rest. That company’s own rules then decide how long it is kept and who can see it.

The short answer. Everything you paste into an artificial intelligence goes to the company that runs it, so look at what is in the text first. Paste it here and this page shows the personal details it can find, on your own device. It can miss a detail, so read the text yourself too before you send it.

How it works, in four steps

  1. Paste or choosePaste the text, or choose a document, before it goes into any artificial intelligence.
  2. The check runs on your own phone or computerWhat you add stays on your device, and the page keeps working with the internet off.
  3. Read what it found and what to do nextSee the names, numbers and private details still inside it, and what to take out.
  4. What this check cannot doA name, a diagnosis or a trade secret written in plain sentences has no pattern, so it will not be found.

Never paste these

  1. Passwords, PINs and one-time codes. Nobody needs them to help you, and an artificial intelligence never does.
  2. Card and bank numbers. Full card numbers, bank account numbers, sort codes and routing numbers.
  3. identity numbers. Passport, identity card, national insurance, social security and tax numbers.
  4. Health details. Yours or anyone else’s: conditions, medicines, test results, sick notes.
  5. Other people’s details. A customer’s, patient’s, student’s, colleague’s or relative’s name together with their phone number, address or email.
  6. Staff records. Pay, appraisals, grievances and disciplinary matters.
  7. Company and client secrets. Contracts, prices, unreleased plans, anything under embargo or marked confidential.
  8. Photos or screenshots of any of the above. An artificial intelligence can read the words in a picture.

Need the artificial intelligence’s help with a message about real people? Use Hide Names from artificial intelligence. It swaps the names and numbers out before the artificial intelligence sees them, and puts them back into the reply on your own phone.

Not sure what is in it?

For a long email, a document or a spreadsheet, where a name or a number is easy to miss. Paste it here and it points out every item from the list above that it finds. It is read on this device only and sent nowhere.

0 characters

What it will not do

  • Not a guarantee. A prompt that passes every check can still produce a bad answer, and one that fails them can produce a good one.
  • Not a company-wide monitoring system. It finds patterns it knows about. A name, a diagnosis or a trade secret written in plain prose has no pattern, and it will not be found.
  • Not a compliance tool. It does not make you compliant with any regulation, and it does not certify anything.
  • Not connected to any model. It never calls one, which is why it cannot tell you what an answer would look like.

Why these checks and not others

Most published prompt advice is folklore. These checks are limited to things with either a measured effect in published research, or a plain mechanical justification. Where the evidence is thin, it says so on the check itself rather than in a footnote.

Formatting matters more than wording. Sclar, Choi, Tsvetkov and Suhr found performance differences of up to 76 accuracy points on LLaMA-2-13B from meaning-preserving changes to prompt format alone, and the sensitivity survived larger models, more examples and instruction tuning. arXiv:2310.11324, International Conference on Learning Representations 2024.

Personas do not improve accuracy. Zheng, Pei, Logeswaran, Lee and Jurgens tested 162 personas across four model families on 2,410 factual questions and found that adding a persona to a system prompt does not improve performance, and that picking the best persona is no better than random. arXiv:2311.10054, Findings of Conference on Empirical Methods in Natural Language Processing 2024.

Step-by-step helps on maths, not on everything. Sprague and colleagues meta-analysed over a hundred papers and ran 20 datasets across 14 models, finding chain-of-thought helps mainly on mathematical and symbolic reasoning, with much smaller gains elsewhere. arXiv:2409.12183, International Conference on Learning Representations 2025.

Examples work through their shape, not their answers. Min and colleagues found that randomly replacing the labels in demonstrations barely hurt performance across 12 models: what carries the benefit is the label space, the input distribution and the format. arXiv:2202.12837, Conference on Empirical Methods in Natural Language Processing 2022.

A rigid output format can cost reasoning. Tam and colleagues report a decline in reasoning under format restrictions, with stricter constraints costing more. This is why the check asks for reasoning first and formatting second, rather than treating a schema as free. arXiv:2408.02442.

Asking a model to flag uncertainty is a preference, not a finding. The check rewards it because a stated instruction is cheap and a fabricated citation is expensive. No controlled result is cited for it because none was found.

People do paste sensitive data into these tools. LayerX reported that around 18% of enterprise employees paste data into generative artificial intelligence tools, that more than half of those pastes include corporate information, and that roughly 72% of access happens through non-corporate accounts (Enterprise artificial intelligence and SaaS Data Security Report 2025). Cisco's 2024 Data Privacy Benchmark Study, covering 2,600 privacy and security professionals across 12 countries, found 48% had entered non-public company information into such a tool.

Questions people ask

Who made this?

UtilForge makes it. UtilForge is a website of free cybersecurity tools. The About page explains why the tools were made, and the Contact page is the way to reach us.

Is this a scam site?

You do not have to take our word for it, because you can check. This page does not ask for payment, a sign-in or card details. It is set so that your browser stops the page sending anything off your phone or computer, and you can test that: let the page finish loading, switch the internet off, then use it. It keeps working, because it has nowhere to send anything. If you are still unsure about any website, do not type anything private into it. UtilForge also sells optional packs of tools through Gumroad, and nothing on this page needs one.

What happens when I close the page?

What you pasted is gone. It saves nothing in your browser and puts nothing in the web address of the page. The only thing that can stay is text you chose to copy with a Copy button: your phone or computer keeps it on its clipboard, the place that holds copied text, until you copy something else.

Does it cost anything, and do I need to sign in?

It is free, and you can start straight away. UtilForge also sells optional packs of tools through Gumroad, and nothing on this page needs one.

What should I never paste into an artificial intelligence?

Passwords, PINs and one-time codes; card and bank numbers; identity numbers such as passport, identity card, national insurance, social security and tax numbers; health details, yours or anyone else's; other people's details such as a name with a phone number, address or email; staff records; company and client secrets; and photos or screenshots of any of these, because an artificial intelligence can read the words in a picture.

Why should I be careful what I paste into an artificial intelligence?

Everything you type or paste into an artificial intelligence goes to the company that runs it, whichever artificial intelligence it is and whichever country it is in. That company's own rules then decide how long it is kept and who can see it.

Will the paste check find every secret?

No. It finds patterns it knows about. A name, a diagnosis or a trade secret written in plain sentences has no pattern, so it will not be found. It is not a compliance tool and does not certify anything. Paste what you are about to send and it points out each item from the list that it finds. It is read on your own device and sent nowhere.

What if I need an artificial intelligence to help with a message about real people?

Use Hide Names from artificial intelligence. It swaps the names and numbers for labels before the artificial intelligence sees them, and puts the real details back into the reply on your own phone or computer.

Did this check help you?

Tell UtilForge what worked and what did not. Each button opens an email to lindsay@utilforge.org that you write and send yourself. UtilForge will only quote your words on this site if you say it may, and then with your first name and country only.

Yes, it helpedSomething was missing

The whole method in one book. “How to Become Safer Online” is a free large-print guide to the five steps most scams follow, and what to do if money or details have already gone. Read or print the free book.