About UtilityBox
The privacy architecture that powers AI Data Inspector.
UtilityBox builds small, focused, local-first browser tools. AI Data Inspector is our flagship — an analyzer for ChatGPT, Claude, Gemini, DeepSeek, Llama and Qwen chat exports that never uploads a single byte.
Why we built it
Developers live in AI chat history. We paste production log lines, credentials-in-disguise, architecture decisions, and half-finished code into ChatGPT and Claude every day. When it came time to actually search, audit, or migrate that history, every tool we found wanted the file on their server.
That felt backwards. The most sensitive data you own today is your conversation log, and the privacy-proof architecture has existed since 1995: don't transmit it at all. So we set out to prove a static page, a Web Worker, and JSZip can do everything a cloud tool can — minus the cloud.
The local-first architecture
Every stage of analysis is deliberately pinned to the browser sandbox:
- Decompression. JSZip expands ZIP archives in your browser heap
via
File.arrayBuffer()and streaming ZIP reads. No upload, no server decompression. - Parsing. ChatGPT mapping graphs, Claude `chat_messages`, Gemini Takeout history, DeepSeek chat maps and generic role-based JSON/JSONL are normalized by a platform-aware reducer into one model.
- Computation. Stats, full-text search, heatmaps and the secret scanner run in a dedicated Web Worker, keeping the main thread responsive on multi-gigabyte archives.
- Export. Markdown, clean text and JSON are generated as Blob URLs and downloaded straight from your browser — no postback involved.
The net effect: the only network requests this page ever makes are static assets and, on marketing pages, optional third-party ad or font requests. Your data is never in that path.
Security & privacy standards
- Zero telemetry in the analyzer. No analytics scripts on the tool. We measure nothing about how you analyze.
- Strict transport & headers. HTTPS-only with X-Frame-Options: DENY, nosniff, a locked Permissions-Policy, and COOP: same-origin.
- Least-privilege storage. The analyzer persists only non-conversation preferences (theme, support badge). Contents are heap-only.
- Blob-only downloads. Exports are in-memory Blob URLs — never routed through our infrastructure.
- Optional identity. Google Sign-In (when used) is isolated to support-tier labeling; it is never required to analyze files.
- Honest ads boundary. Ad units (AdSense, when enabled) render in third-party frames with no access to analyzer memory or data.
Who is behind it
AI Data Inspector is built and maintained by the UtilityBox team — a small group of privacy-focused engineers who ship everyday utilities that behave themselves. We maintain the export parsers in the open, keep the tool free, and answer email ourselves at support@utilitybox.app.
Our guiding rule is simple: the tool that needs the least trust is the tool you should trust. By removing the server, we remove ourselves from the trust equation entirely.
We are not affiliated with, sponsored by, or endorsed by OpenAI, Anthropic, or Apple. 'ChatGPT' and 'Claude' are trademarks of their respective owners.