Mask sensitive data with smart defaults (email, phone).
Use to sanitize payloads before logging or sharing.
Everything runs in your browser. API/Webhook calls only hit the endpoints you choose; nothing is stored or shared by default.