A toolbox that stays in the browser.
These tools deliberately avoid server-side uploads and storage. Files are read locally with the File API and results disappear when the page is refreshed.
Password generator
Generated locally. GhostKit does not transmit or save it.
Passphrase generator
Privacy checklist
📷 Photo metadata (EXIF) viewer
Choose an image to see, locally, whether it embeds GPS coordinates, a timestamp or camera/device info. Nothing is uploaded — parsing happens entirely in your browser.
Works on JPEG files, which are the most common source of embedded GPS data. If GPS coordinates are found, do not post the original file — use the privacy copy or redaction tool below first.
🖼 Photo redaction studio
Load a photo, drag boxes over faces, license plates, addresses or documents, then export a flattened copy. The original file is never modified or uploaded — this creates a new local copy only.
Draw with mouse or touch. This performs pixel-level redaction (the covered area is fully overwritten), unlike a blur filter which can sometimes be reversed.
Image privacy copy
Choose an image. The browser creates a new JPEG copy through a canvas, which strips EXIF metadata from the exported copy since canvas re-encoding does not carry it over. Keep the original evidence separately.
Text redaction helper
Paste sensitive text and replace obvious email addresses, phone numbers and URLs with placeholders. Review manually before publishing.
Username / identifier audit
Removal target map
Work from the source outward. Search engines cannot normally delete the underlying website.
- Original host / publisher
- CDN / image host if applicable
- Search engine index
- Social reposts / mirrors
- Cached / archived copies
- Map and street-level imagery providers
- People-search / data-broker listings
Data-broker / people-search workflow
- Search your name, old addresses, phone numbers and usernames.
- Record the exact listing URL before requesting removal.
- Use the provider's opt-out/privacy request process.
- Search again after the stated removal period.
- Repeat periodically because data can reappear.
Browser safety reset
- Update browser and operating system.
- Remove unknown extensions.
- Review notification permissions.
- Review saved passwords and passkeys.
- Review site permissions for camera, microphone and location.
- Clear sensitive browsing data when appropriate.
- Check downloads for unexpected files.
Phone safety reset
- Install operating-system updates.
- Review device administrator / management profiles.
- Review installed apps and remove unknown ones.
- Review location permissions.
- Review Bluetooth, nearby-device and hotspot settings.
- Review notification previews on the lock screen.
- Use a strong device passcode.