Visitors paste private details into comment boxes all the time: their own phone number, a customer’s email, worse. Once it’s saved, it’s in your database, your backups and your search results, and it’s your problem.
Scrubwell removes that information before it is saved.
- Two layers. Visitors see
[REDACTED PHONE]appear as they type, so they know what happened. Your server removes it again when the comment arrives, so bots and visitors with JavaScript turned off are covered too. - Leaves the right fields alone. The comment form’s own Name, Email and Website fields are never touched.
- No outside service. Everything runs on your site and in the visitor’s browser. Nothing is sent anywhere.
- Counts what it catches. See how many items were removed under Settings Scrubwell.
Free version removes:
- Email addresses
- US and Canadian phone numbers
Scrubwell Pro
Pro adds credit and debit card numbers (checked with the card-number checksum, so order numbers aren’t caught), Social Security numbers, bank routing and account numbers, and US street addresses. It also adds a “Send anyway” button for the types you allow (with a log), a “never remove” list, a per-post off switch, a choice of roles to skip, and protection for Contact Form 7 messages, bbPress and BuddyPress posts and private messages, and WooCommerce order notes.