Scrubwell – Hides Emails & Phone Numbers in Comments

Visitors paste private details into comment boxes all the time: their own phone number, a customer’s email, worse. Once it’s saved, it’s in your database, your backups and your search results, and it’s your problem.

Scrubwell removes that information before it is saved.

• Two layers. Visitors see [REDACTED PHONE] appear as they type, so they know what happened. Your server removes it again when the comment arrives, so bots and visitors with JavaScript turned off are covered too.
• Leaves the right fields alone. The comment form’s own Name, Email and Website fields are never touched.
• No outside service. Everything runs on your site and in the visitor’s browser. Nothing is sent anywhere.
• Counts what it catches. See how many items were removed under Settings → Scrubwell.

Free version removes:

• Email addresses
• US and Canadian phone numbers

Scrubwell Pro

Pro adds credit and debit card numbers (checked with the card-number checksum, so order numbers aren’t caught), Social Security numbers, bank routing and account numbers, and US street addresses. It also adds a “Send anyway” button for the types you allow (with a log), a “never remove” list, a per-post off switch, a choice of roles to skip, and protection for Contact Form 7 messages, bbPress and BuddyPress posts and private messages, and WooCommerce order notes.