Privacy Policy

Last updated: 12 October 2026

Your text

The cleaner runs entirely in your browser as JavaScript on this page: what you paste stays in the tab, and no server receives it. There is nothing for us to store, read, log or train on. You can check this yourself: turn off your network connection after the page has loaded and the cleaner still works.

The rewriter is the exception

The Rewrite it like a human button is the one thing here that sends your text away. Press it and your text goes to our server, which passes it to Anthropic, whose AI model rewrites it and hands the rewrite back to you. Only Anthropic receives it, to rewrite it, and Anthropic does not train its models on it. We keep no copy of your text or the rewrite, we do not log it and we do not train on it. If that is not what you want, use the cleaner and leave that button alone: the cleaner never sends anything anywhere.

What stays on your device

The cleaner keeps a short list of your last ten cleanups in this browser's local storage: how many characters came out, and the first few words of the result so you can recognise it. It never leaves your device and we cannot see it. The Clear button next to the list wipes it, and so does clearing your browser data.

Visitor statistics

We count page views and tool uses to see how many people use the site. For each day we keep counts of visits, which kind of source sent them (a search engine, another site or none) and a shortened hash of each visitor's IP address, so that every visitor is counted once. We never store the IP address itself, but that hash counts as a pseudonym, not as anonymous data. There are no accounts, so none of this is linked to a name. The rewriter's daily limit is counted per IP address in memory only and is not written to disk.

To count returning visitors and understand how the tools are used over time, we set one first-party cookie with a random number. The number is not derived from your IP address or your device, and the cookie lasts 13 months. We store it only in a scrambled form that we cannot link back to the cookie without a secret kept on our own server. It is used for our own statistics only, never shared and never used for advertising or any other purpose. We do not set it if your browser sends Do Not Track or Global Privacy Control. You can stop it at any time by clearing your cookies or with the opt-out button below. Data of individual visitors is deleted after 13 months; aggregated counts without any identifier are kept. Nothing changes in the short daily code made from your IP address that we use for our other usage counts: those counts are still deleted after 60 days.

Switch statistics off for this browser

To protect the service, if one address sends many rejected uploads in a short time (20 files over the size or format limit within an hour), we block uploads from that address for 24 hours. For this we keep a scrambled form of the address (a different code from the daily one, because the block must outlast the day) for at most 24 hours, and it is never used for anything else.

Advertising and analytics

This site shows ads through Google AdSense. When ads are shown here, third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google’s use of advertising cookies enables it and its partners to serve ads based on those visits. You can opt out of personalised advertising in Google’s Ads Settings, and opt out of some other vendors’ advertising cookies at www.aboutads.info. Where consent is required, Microsoft Clarity only loads after you agree in the cookie banner; it records how the page is used, such as clicks and scrolling, so we can see where the page gets in the way.

Who we are, why we process data, and for how long

TextNinja is a service of ShinobiTools, registered with the Dutch Chamber of Commerce (KvK) under number 42147182. Contact: info@shinobitools.com.

• Rewriting your text when you press Rewrite, to provide the service you ask for (GDPR Art. 6(1)(b)). We only pass your text to Anthropic, our processor, and the rewrite back to you, and do not store them; once the rewrite is back, we keep nothing. This is the same for free use and with a pass.
• Limits, security and usage counts, our legitimate interest in keeping the site working, fair and free of abuse (Art. 6(1)(f)). Usage counts are deleted after 60 days.
• Report a problem, your message, the page address, an email address if you fill one in and, if the box is ticked, a screenshot of the page. The box is ticked by default; you can untick it. The screenshot shows the page as you see it, including any text in the box. Why: to see and fix the problem (Art. 6(1)(f)). A language model from Anthropic sorts the text of your report for us. Screenshots are deleted after 30 days.
• If you tick “Also send my file and the result” in that window: the file you chose and the result of your job are stored for 30 days and used only to reproduce and fix the problem you reported. They are not shared, not included in our backups, and you can ask for earlier deletion at info@shinobitools.com. Basis: fixing the problem you reported (Art. 6(1)(f) GDPR); the box is ticked by default and you can untick it.
• Your email address, if you give it to us for a discount on a pass or for our emails: your consent (Art. 6(1)(a)). We keep it until you unsubscribe with the link in every email; we send those emails through Resend. Copies of emails we already sent you stay in our send log.
• Advertising and analytics cookies, your consent through the cookie banner (Art. 6(1)(a)).
• Google Fonts, the typeface used on this site is loaded from Google's servers (fonts.googleapis.com and fonts.gstatic.com) as a page opens, so Google receives your IP address and browser details with that request. We use it to show the pages in the intended typeface. See Google's privacy policy.
• Stripe, if you buy a pass, you pay on Stripe's own checkout page, not ours. Your card details go to Stripe under its privacy policy, and we never see them. We receive confirmation that the order was paid, its order number and the e-mail address you entered.

Files you choose to send us

Next to a result, you can click “Share these 2 files” to help us find mistakes our tests don’t catch. This is entirely optional and off by default.

• What we ask for: the one file you uploaded and the result we gave you, and nothing else: only the part we need: up to 30 seconds of audio, one page of a PDF, or an image with the location data (EXIF/GPS) removed.
• Faces: a separate checkbox, off by default, where you confirm the file shows faces and everyone in it agreed, with no children in it. Without it, faces are blurred or the file is refused.
• Why: to find mistakes our automatic tests don’t catch, and turn real ones into new test cases.
• Legal basis: your explicit consent (Art. 6(1)(a) and, for special-category data such as faces, Art. 9(2)(a) GDPR). For other people who may appear in your file, our legitimate interest with strict minimisation (Art. 6(1)(f) GDPR).
• How long: at most 30 days, then it is deleted automatically.
• Withdraw any time: you get a one-time code on screen. Enter it whenever you like and we delete the pair, its label and the consent record immediately: as easy as giving it.
• Who sees it: one person on our team, and nothing else. A local AI model only adds a label for the kind of mistake, never a description of a person, and it never leaves our own computer.
• What we never do: we never store your IP address, filename or email with it; never train or fine-tune any model on it; never share it with anyone else, publish it, or offer it through the API; and never use it to identify or score anyone.

Where it runs. The site and its server run on computers we operate ourselves; some work may run on a different one of our own computers than the web server. Traffic reaches us through Cloudflare's network. Apart from that, the only outside company that receives your text is Anthropic: when you press Rewrite, and when you report a problem. For the rewrite, Anthropic processes the text under its data processing addendum, does not train its models on it and deletes it from its systems within 30 days, longer only if a request breaks its usage policy. Anthropic is a company in the United States.

Backups. Uploads and results are never included in our backups. The visitor counts described above are included in our encrypted backups, for up to 12 months.

Your rights. You can ask us for access to your data, or to correct or delete it, and you can object to processing based on our legitimate interest: write to info@shinobitools.com. Because we do not link data to names, we may ask for something that lets us find it, such as the email address you used. You can withdraw consent at any time. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or to the supervisory authority in your own country.

Contact

Questions about this policy: email info@shinobitools.com or use the feedback button on any page.

By Sam Ridder, I build and run TextNinja on my own hardware, on my own. Who I am.