Three steps. No account, no tracking.
- 01
Drop a file or paste a link
Up to 50 MB, or a link from Google Drive, Dropbox, GitHub or any direct file address.
- 02
Pick how deep to clean
Light removes hidden data. Standard rebuilds the file. Aggressive also converts it to the safest format.
- 03
Download the clean copy
Same format (Aggressive converts it), minus the macros, scripts, location data and threats, plus a report of what was removed.
Pick the level that fits the job.
Standard suits almost everything. Use Light when you trust the file and only care about privacy, and Aggressive when you don't trust it at all.
For files you mostly trust. A virus scan and a full wipe of hidden data, with no rebuilding.
- removes
- location, author, timestamps, device, embedded tracking metadata
- keeps
- format, quality, fonts, layout, editing. Macros and scripts stay too
- for
- photos before sharing, files from people you know
Trust nothing, keep the format. The file is taken apart and rebuilt from safe content only.
- removes
- macros, scripts, embedded objects, hidden code, all metadata
- keeps
- original format, visible content, basic editing
- for
- anything from someone you don't know
Maximum safety. Everything Standard does, then the file is converted to its safest form.
- converts
- Office → PDF · images → PNG · HTML → text · audio → WAV · video → MP4
- loses
- the original format and most editing
- for
- risky attachments, sensitive environments
Four checks run alongside every clean.
The checks don't decide whether your file gets cleaned. They decide what the report can tell you about what was inside.
Virus signatures
Millions of known malware fingerprints, refreshed every hour from official and community feeds.
Threat families
Thousands of named patterns: ransomware, banking trojans, state-made toolkits. A match shows in your report.
Office macros
Macros are read before they're removed, so the report can say what they would have done.
PDF active content
JavaScript, auto-run actions, launch commands, hidden forms and embedded files, counted and named.
Check a link before you click it.
Paste a web address and we open it on our servers, never your device. Every scan ends with a verdict: no known threats, suspicious, or malicious.
- Hidden instructions planted on a page to hijack an AI assistant reading it for you.
- Pages dressed up as a service you trust, like a fake login for your bank or email.
- Fake "verify you are human" pages that get you to paste a command into your computer.
100+ formats get a full clean.
The Light level accepts almost any file for metadata removal. Programs like .exe and .dll are always blocked.
$ cleanthis --faq --all
Everything you might wonder, before uploading.
BASICS
Is it really free?
Yes. The website is free with a generous daily allowance per person, and the API is free while it's in beta.
Do I need an account?
No. Accounts are only for the API, and even those have no email or password, just an account number you keep.
How big can my file be?
50 MB per file, whether you upload it or paste a link.
What if my file fails to clean?
You'll see a message saying why. Your upload is erased either way.
PRIVACY
Is it safe to upload my files?
Files are processed in a sandbox and never shared with anyone. There's no tracking, no analytics and no data collection.
How long do you keep my file?
At most 15 minutes. It's then overwritten so it can't be recovered. No copies, no backups.
Do you store the links I scan?
We keep no history of what you scanned. A verdict may be cached briefly to speed up repeat checks, and Deep-scan screenshots are erased within 15 minutes.
WHAT GETS REMOVED
Which threats and data are removed?
Macros and scripts, embedded attachments and objects, hidden content, dangerous markup, and personal metadata such as author, location, camera and timestamps.
What changes in a cleaned email?
Sender, recipients, subject, date, body and attachments stay. Hidden routing info, broken signature stamps and encrypted attachments are removed. Use Light to keep the email exactly as it is.
What about calendar invites and contacts?
The event or contact details stay. External links, pop-up alarms that can trigger actions, and hidden attachments are removed.
LINKS · DEVELOPERS
Scanning a file vs scanning a page?
A link to a file gets cleaned and you get the file back. A link to a web page gets a safety verdict instead, with nothing to download.
Is there an API?
Yes: file and link uploads, job polling, signed downloads and webhooks, with anonymous accounts. Read the API docs.
Ready to try it?
No sign-up, no tracking. A clean copy in about a minute.