Your tools shouldn't be able to fire you

A developer's account of OpenAI deactivating his account over running a log4j decompiler on his own machine spread widely on X this week, prompting developers to argue that cloud-hosted AI tools leave users' workflows vulnerable to automated enforcement under provider terms. In response, a team built Mask, a browser-based tool that detects and replaces names, emails, phone numbers and addresses with placeholders before text is pasted into any AI tool, running entirely locally with no uploads or accounts. The team reports Mask flagged all 36 seeded personal details across 15 synthetic business texts, and offers unlimited use plus a pre-send relay for $9 a month.

A post made the rounds on X this week. A developer says OpenAI shut down his account. His story: he was running a log4j decompiler on his own machine, for his own work. The deactivation email called it "Cyber Abuse". We can't verify his story. Take it as his account, not established fact. But watch the reaction. Developers believed it instantly. That reaction is the real news: people already expect their AI tools to turn on them. Check the paperwork. OpenAI's Terms of Use https://openai.com/policies/terms-of-use/ say they "reserve the right to suspend or terminate your access" if they decide you breached their usage policies. Anthropic's consumer terms https://www.anthropic.com/legal/consumer-terms say the same, and its usage policy https://www.anthropic.com/legal/aup adds that a Safeguards Team runs "detection and monitoring" to enforce it. That's their right. It's their service. But look at the shape of the deal. An automated system flags you. A form letter goes out. Your tools stop working. Your workflow, your prompts, your history... gone. If one false flag can kill your whole stack, you never owned the stack. You were renting it. And the landlord doesn't pick up the phone. Read the replies under that post. They all say the same thing. Local models. Own clusters. Own weights. One reply, next to a photo of his own hardware: "owning my intelligence". The tools got good enough for this to be practical. Open-weight models run well on hardware that fits on a desk. No usage policy in the loop. No account to suspend. The model can't be taken back, because it's already yours. It's not only the model. It's what you hand over every day. Paste a customer email into a cloud tool to "summarize this". Paste a support thread. Paste a contract. That text leaves your machine and lands somewhere you don't control, under terms you didn't read. Most teams fix this with policy documents. Policies are nice. Software is better. So we built a small thing. Mask https://shuttlewright-mask.pillar-3a8.workers.dev/ finds names, emails, phone numbers and addresses in text and replaces them with safe placeholders. Before you paste anything into any AI tool. Everything runs in your browser. No uploads. No accounts. No tracking. We never see your text, because it never leaves your machine. That's not a policy promise. It's how the software works. We tested it on 15 synthetic business texts seeded with known personal details. It flagged all 36 out of 36. That's a synthetic test, not a promise about your text, and we're telling you exactly how it was measured. It's free. If you need unlimited use and a pre-send relay, that's $9 a month. Keeping the redaction local. That part is not negotiable. Adding more entity types, and reading the terms of the tools we all use, so we can keep writing pieces like this one. The devs in those replies are right. Own your intelligence. Start with the part you can fix today: stop handing strangers your raw data. Try Mask free https://shuttlewright-mask.pillar-3a8.workers.dev/ ... takes about ten seconds, and your text never leaves your browser.