This page describes the Milestone E research contribution prototype. Local processing happens first. Nothing is submitted unless you choose a scope and give final consent.
Your original PDF is not uploaded. It is opened and processed only in this browser session.
What happens on your device
Your browser reads the selected PDF into temporary memory.
A self-hosted PDF.js worker validates and renders each page.
The prototype checks whether each page contains a usable text layer.
Rendered page previews are held only for the current browser session.
You review redactions and confirmed fields before any optional submission.
What an optional contribution may send
Fields you reviewed and confirmed.
A small set of billing-related text fragments that are scrubbed again and include normalized page positions.
Flattened redacted PNG pages only when you select the page-sharing option.
What is never intentionally submitted
The original PDF bytes, filename, PDF metadata, attachments, forms, or scripts.
The complete extracted text layer.
Full phone or account numbers in the structured manifest.
Retention and withdrawal
You choose either 90 days or 12 months before submission. The receipt contains a random submission ID and a private withdrawal code. The server stores only a one-way hash of that code. A successful withdrawal deletes the stored manifest and private page files.
Current limits
Automatic redaction can miss names, graphics, addresses, barcodes, or other identifying details. You must inspect every page. Scanned PDFs without a text layer have limited automatic detection. Do not treat this research prototype as a finished anonymization tool.
Independent research
BillCredit Watch is not affiliated with, sponsored by, or endorsed by AT&T, Verizon, or T-Mobile. It does not sign in to your account, contact the carrier, or provide legal or regulatory advice.