Overshare Checker

Most oversharing is not careless — it is rushed. A screenshot of a win posted with an order number visible. A for-sale listing that includes the shipping label. A frustrated reply that names a kid's school. Each detail looks harmless on its own. Together, they are a starter kit for identity theft: a full name plus a birth date plus a phone number is often enough to reset passwords, open accounts, or convincingly impersonate you to your own contacts.

What the scan checks: email addresses, phone numbers, US Social Security numbers, credit and debit card numbers (verified with a real Luhn checksum, so random digit strings are not flagged), API keys and leaked secrets — OpenAI/Stripe-style keys, AWS, GitHub, Slack, Google, npm, private key blocks, and plain-text password = hunter2 assignments — plus IBAN bank account numbers (mod-97 validated), street addresses, and dates of birth.

What it honestly cannot do: names have no pattern, so the scanner cannot tell your name from an ordinary word. It cannot catch nicknames, deliberately disguised text (j0hn d03), or photos of documents. Think of it as a spell-checker for privacy: it catches the obvious slips, and you still give the final draft a human read. A clean scan is a good sign, not a guarantee — pair it with locked-down account settings (see our Social Privacy Checkup) for the full safety stack.