Remove Claude watermarks and AI metadata

Two things. From text, it deletes invisible Unicode characters — zero-width spaces, bidirectional controls, soft hyphens, Hangul fillers, and the Unicode tag block used to smuggle hidden messages — and normalises exotic spaces to ordinary spaces. From images, it strips signed provenance metadata: C2PA manifests, EXIF, and XMP. Both run entirely in your browser.

No. A statistical watermark is not a hidden character you can delete. It lives in which words the model chose — the model biases its token selection so the resulting sequence carries a signal a detector can measure. Deleting invisible characters does not change a single word, so it has no effect on that signal. The only thing known to degrade a statistical watermark is rewriting the text substantially, which is a different operation from cleaning it.

When a language model writes, it picks each word from a range of plausible options. A watermarking system nudges those choices according to a hidden pattern. The text still reads normally and means the same thing, but across a long enough passage the pattern is statistically detectable. It is a property of the word sequence itself, which is why copying and pasting carries it along and why paraphrasing weakens it.

C2PA is an open standard for content provenance. An AI system can attach a cryptographically signed manifest to an image recording that it was generated or processed by AI. Because the signature covers the file's contents, re-encoding the image destroys it. This tool redraws the image through a canvas and re-encodes it, so the manifest, along with EXIF and XMP, does not survive.

The text and images you clean are never uploaded. All of that processing happens in your browser using JavaScript and the canvas API, there is no account, and nothing you paste or drop is stored or transmitted. Three things do leave the page, none of them your content: Google Analytics and Cloudflare Web Analytics record ordinary page-view information such as your country and referring page, and the running totals shown on this site are kept up to date by sending three integers — how many texts were cleaned, how many images, and how many characters were removed. A Content-Security-Policy restricts outbound connections to those endpoints and nothing else.

No, and any tool claiming otherwise is overstating what it can verify. Removing a provenance mark removes one signal. It does not remove statistical watermarks in text, pixel-level watermarks in images, or stylistic patterns that classifiers look for. Equally, the absence of a mark was never proof that content is human-written — plenty of AI content carries no mark at all.

No. Some provenance systems pair signed metadata with a watermark embedded in the pixels themselves, which survives re-encoding and can be matched against a perceptual-hash database. Re-encoding removes the metadata container but leaves the pixel data essentially intact, so any mark carried in the pixels remains.

PNG, JPG, and WebP, up to 10 MB. The cleaned file is exported in the same format it came in, so a JPG stays a JPG. Anything else is rejected before processing.

It is free with no account and no limits. Because everything runs on your device there is no server cost per use, so there is nothing to meter.

This tool is intended for personal privacy and formatting cleanup on content you own — stripping location data from a photo before sharing it, or removing invisible characters that break formatting. You remain responsible for complying with the EU AI Act, platform terms of service, and any academic or professional rules that require disclosing AI assistance.