Changelog

Updates about Piixie features, supported file types, privacy improvements, website changes, bug fixes, and release notes.

November 4, 2026 — Piixie 1.108 for macOS and Windows

Fake data that fits the document

Synthetic data now stays true to what it replaces:

Addresses are real places: the street, postcode, town and province agree, and an address names a country only when the original did. A Zaragoza address no longer ends in “Brasil”.
Phones stay mobiles or landlines, and a number written two ways gets the same fake both times.
Card numbers, Spanish IBANs, CIFs and Social Security numbers come out valid and of the same kind.
Names follow the document’s language and country: a Brazilian document gets Brazilian names, and a person’s surnames stay surnames.
A fake is within a character or two of the length of what it replaces, so the lines of a PDF stay in place.

Synthesizer control

A profile’s new “Synthesizer control” panel loosens any of it: Realistic (the default) or Far-fetched, the fakes’ language and country, their length (Tight, Close or Free), “Keep each person’s gender” and “Real places”.

The watermark links to Piixie’s pricing

In Piixie Free, the “Redaction by Piixie.ai” mark on PDF and Word documents is now a link to Piixie’s pricing page. It looks the same as before.

Secure Browser

When ChatGPT or Claude writes a fake in capitals, or with its “de” in lowercase, Piixie restores the real value in the same casing. Before, those were left in the answer.

Editor

Clicking a link in a Word document in the Editor no longer takes the app’s window to it.

November 3, 2026 — Piixie 1.107 for macOS and Windows

Piixie Free anonymizes the first half of each document

Piixie Free, and a license past its end, now anonymize the first half of every document. The second half is not in the anonymized file at all: Piixie never reads it and never sends it to a model.

A PDF keeps half its pages, rounded up, so a one-page letter goes through whole. Each page after them is a blank page of the same size with a “Page not anonymized in Piixie Free” sign.
A Word document keeps the first half of its text and ends with a page carrying the sign. Notes, comments, pictures and links that only the second half used are left out too.
Text, CSV, Excel and SQL files keep their first half and end with a closing line. A table keeps its header, and an SQL dump is cut after a full statement, so it still loads. In Free, an Excel file comes back as its values, without formatting or formulas.
Pro and Business anonymize whole documents, and so does Piixie Cloud, where each document is paid for. Files uploaded through the Secure Browser stay whole.

Roles are not people

A role that a document writes with a capital (“la Reclamante”, “La denunciante”) is no longer replaced by a fake person’s name. Piixie still finds it, but keeps it as it is: it is listed in the Editor switched off, a click away from being anonymized. There is no list of roles: Piixie decides from how the document itself writes the words, and it never takes a name the model found for a role.

Dates

A date the model filed under the wrong kind, such as an ID, is always replaced. Some were left in the document as they were.

The risk slider warns you

The Editor’s risk slider turns green, yellow, orange or red with the share of entries it leaves unanonymized, and says how many entries it keeps (”≥ 40 · 71 kept”). The Queue’s threshold uses the same colors.

Secure Browser

After you switch the model to Lite, ChatGPT and Claude uploads and chats work again. Before, they failed with “Unable to upload” until Piixie was restarted.

The Queue and History

A document’s images show as a picture icon with their number, in place of an “img(N)” tag.

November 3, 2026 — Piixie 1.106 for macOS and Windows

Dates stay dates

A date is no longer taken for a phone number or an ID. Lite and the Small model took “24/07/2024” or “rec. 1437/2020” for a phone often enough to fill a legal letter with fake phone numbers; every date now comes back as another date, written the same way.
The rulings, guidelines and files a document cites (“STC 94/1998”, “Directrices 04/2022”) are public, and the models leave them as they are.
A case number or a month with its year keeps reading as one: “PS/00627/2025” becomes another case of a nearby year and “04/2022” another month and year, not “40/9797”.
A label such as “número de DNI” or “fecha de nacimiento” is no longer replaced as if it were the value.

Fakes that fit

A fake takes about the room of what it replaces, so a rewritten PDF line neither overflows nor leaves a gap. Two parts of one address never share a fake, and a street without a number stays a street.
A company keeps one fake throughout the document, and its short forms and initials are written from it.
Fake text is written in the document’s language, never Latin filler. British and Swedish fakes are new.

A risk score for every entry

Every entry gets a risk from 1 to 100, from its type, how its value looks and how sure Piixie is of it. A slider in the Editor’s status bar switches off everything under a threshold in one move, and the entries you switched by hand stay as you put them. The Queue can apply a threshold before the file is written.

The Editor

The list follows the page you are reading, with a “Page N” filter, and every replaced value has a soft tint in the document. Click a tint to find its entry; click an entry to light its marks in the document.
Rest the pointer on a mark to see its card: the type, the original, what it becomes and how many times it appears. ⇧-click keeps a value, ⌘⇧-click keeps its whole kind, and a kept value’s mark can be switched back on.
The viewer zooms like Preview: − and +, Fit page, Fit width, ⌘+ ⌘− ⌘0 ⌘9 and trackpad pinch.
The close prompt says “Discard”, and every button shows the letter that presses it.

Word documents

Pictures in Word documents are handled like a PDF’s: shown to a vision model, auto-blurred, blurred, covered or redrawn, and listed in the Editor with their switches.
Word opens every anonymized document cleanly again, without the “unreadable content” warning.

The Queue and the models

An “Anonymize file name” checkbox: off, the anonymized file keeps the original’s name. When the name changes, the original shows small and grey under it.
The processing window shows a progress bar with the time left, a long document’s parts and the entries as they are found; the model’s raw output is one tab away.
A badge names the model a document runs on and says whether it stays on your computer.
Piixie Cloud comes in two tiers: Fast, and Better, which thinks before answering. The free trial runs on Better.
Profiles: + and Clone always work, picking a free name, Clone moved into the ”…” menu, and a profile can be deleted from the list.
The Piixie Cloud trial offer has “Don’t offer this again”.

Secure Browser

Everything sent to ChatGPT or Claude is anonymized, wherever it sits in the request (chat titles, searches, earlier turns of the conversation), and everything that comes back shows the real names, on every page and list, not only in the chat.

Intel Macs

Small and Medium run on the processor of an Intel Mac, using its best instruction set. The Metal build gave wrong answers on Intel graphics.

October 29, 2026 — Piixie 1.105 for macOS and Windows

Word documents look like their pages in the Editor

A Word document (.docx) now shows in the Editor as its pages, with their fonts, tables, headers and page breaks, instead of as plain text. Identical images, such as a logo repeated on every page, share one tile with a ×N badge, so one switch keeps or replaces them all.

Names in PDFs are replaced where they used to slip through

A name is replaced however the PDF typesets it: with ligatures (ﬁ, ﬀ), curly apostrophes, no-break spaces, soft hyphens, accents drawn apart from their letter, or characters stored under glyph names, also when the name wraps onto the next line.
Turned text, stamps at an angle, letterheads, shadowed or fake-bold text and text on an arc are read in the right order, and the fake is drawn in place, turned with the original.
Fakes with ’ € – or other typographic characters fit the space of the original instead of being squeezed.
Where two found names overlap, the fake goes where it leaves the least of the original showing, and the rest of the line keeps its place.

The Editor marks exactly what is replaced

The PDF preview in the Editor marks the same words the anonymized file replaces, whole words only (“Ana” is not marked inside “Anabel”), including names wrapped at the end of a line.

Better fake dates

A fake date never keeps the real month or birthday, and a month name that is part of another name, such as “Plaza de Mayo, 1980”, no longer gives the real year away.

The Secure Browser keeps up with ChatGPT and Claude

ChatGPT used without an account sends messages in a new way, which the Secure Browser let through unchanged. They are anonymized again, and the reply shows the real names. A message the Secure Browser can’t read is now blocked instead of sent as it is.
What you type no longer reaches ChatGPT before you send it: its autocomplete, the draft it sends ahead and its analytics stay on your computer. File names are anonymized too.
On Claude, the real names stay in the conversation after a reply finishes, in your own message as well, and in the titles of the chat list.
When a reply quotes names from a file you uploaded, or calls someone by their first name only, it shows the real ones.

A tidier Editor

The images and the text entries each have a switch that turns all of them on or off. The text entries are grouped by type (names, IDs, emails…), each group with its own switch, and you can fold them all or go back to a single list.
A page from the previous version no longer appears on top of the PDF when you open the Editor or switch between Synthesize, Redact and Label, and the Editor no longer keeps your computer busy while it is open.

October 28, 2026 — Piixie 1.104 for macOS and Windows

Updates install themselves on a Mac

From this version, Piixie → Check for Updates… on a Mac offers Update now: Piixie downloads the new version, checks that it is signed by us and approved by Apple, and restarts into it. If the new version doesn’t start, Piixie puts the previous one back by itself. Install 1.104 the usual way once; later versions install in place. Copies installed with the installer package (.pkg) keep updating through the package, and on Windows the update still opens the download.

Editor

The right-hand panel has an Images section and a Text section, each with a switch that turns all of its entries on or off.
Text entries are grouped by category (names, IDs, emails…), each with its own switch; you can collapse or expand every category, or go back to a single list.
The editor no longer shows a page of the previous document on top of a PDF, and no longer keeps the computer busy redrawing in the Anonymized view.

Better fake dates

Dates are recognised in more wordings and scripts (ordinals, weekdays, month names in the genitive, two-digit years), every spelling of a date gets the same fake date, and a name is never taken for a date word.

October 28, 2026 — Piixie 1.103 for macOS and Windows

Easier to install on a Mac

The Mac download is now a disk image (.dmg): open it and drag Piixie onto Applications. IT teams that deploy apps with an MDM can use the installer package (.pkg) linked under the download buttons. Both are signed and notarized by Apple.

Open a document in the Editor from the list

Click a document’s name in the list to open it in the Editor.

Images

Automatic blurring now covers only what no model has already read, and the Editor’s switches show it and undo it. An image that appears on several pages is redacted page by page.

Better replacements

Replacements match whole words only. Fake company names are as long as the original, and replaced lines in PDFs keep their kerning and style; a fake shrunk to fit its space is no longer cut short.
Public bodies and well-known names are found but kept, a switch away in the Editor.
Fake names keep each person’s gender, middle names, family surname and email address, and a couple such as “John and Mary Smith” gets a fake of the right sex for each.
Every spelling of a phone number, IBAN, card, date, ID, web address or IP address gets a matching fake of its own, and phone numbers keep their country calling code.
A law’s number, such as “Regulation (EU) 2016/679”, is never taken for a phone number or for personal data.
Lite detection no longer marks lowercase words as names, fragments of words, or phone numbers inside references.

Reliability

With a local model, a request sent on a connection the model had already closed is sent again instead of failing.

October 27, 2026 — Piixie 1.102 for macOS and Windows

New version numbers

Piixie’s versions now have two numbers: this release, which follows 0.3.3, is 1.102. The first number changes with major releases, the second with every release. The app finds this update by itself, also from 0.3.2 and 0.3.3 (Piixie → Check for Updates…), and the download page lists it.

Nothing else changes from 0.3.3: the free Piixie Cloud trial and Piixie Cloud reading document images are below.

October 27, 2026 — Piixie 0.3.3 for macOS and Windows

Try Piixie Cloud free

Pro and Business licenses now include three free Piixie Cloud documents. After you anonymize a document with a local model, Piixie asks whether you’d like to try it on our cloud and shows how many free documents you have left (3/3). One click runs the same document again on Piixie Cloud; the result appears in History next to the local one, and your selected model doesn’t change.

Piixie Cloud reads images

Piixie Cloud now reads the images in your PDFs, scanned documents included: names and ID numbers on a scanned form, a license plate in a photo, a photo of a person. With the Synthesize method it replaces them instead of covering them: each item is redrawn in place with the same fictional value used in the text, a photo of a person becomes a fictional stand-in drawn from a neutral description (never from the photo), and every finished image is checked again before it’s written. With the other methods it’s covered, each cover placed on its text and checked the same way. Piixie asks you to confirm once more before the first cloud document, since images are now sent too.

Also

Editing a document keeps what the run did to its images (covered, blurred or synthesized). Before, edited versions started again from the original images.
Windows catches up with macOS: this is the first Windows build since 0.3.0, with Piixie Cloud, the plans and the update check from 0.3.2.

October 26, 2026 — Piixie 0.3.2 for macOS

Piixie Cloud: €1 per document

A new choice in the model menu. Piixie Cloud runs the detection model on our servers, so it’s fast on any computer: about 13 seconds per document, and on our 160-document, 8-language test set it left none of the 2,649 names, IDs, addresses and phone numbers in the output. You pay per document with prepaid credits (€1 each, they don’t expire), on any plan, with no watermark. Only the document’s text is sent; the file is read and rewritten on your computer, and we don’t keep the text.

Plans work as priced

Pro includes 20 documents a month without the watermark, and Business 200 plus batch processing (several files in one run, or several synthetic copies of one). Past the month’s documents, output carries the watermark again until the 1st; nothing is blocked. Settings → License shows how many you’ve used. Free is unchanged: every feature, with the watermark.

Update check

Piixie now checks once a day for a newer version, and Piixie → Check for Updates… checks right away. It downloads a small file from piixie.ai and sends nothing about you; you can turn it off in Settings.

Also

On Free, Piixie shows your options (Pro, Business, Piixie Cloud) when it starts.
Deleting history keeps an entry whose file couldn’t be removed, so you know the file is still there.
Quitting no longer waits on a permission prompt to bring the Secure Browser to the front.

October 26, 2026 — Piixie 0.3.1 for macOS

Local models work on every Mac

In 0.3.0, anonymizing with a local model failed on most Macs with “llama-server exited during startup” (Library not loaded: @rpath/libllama-common.0.dylib). The app was missing some of the model runtime’s libraries, and nobody noticed because they happened to be installed on the Mac that built it. 0.3.1 ships the complete runtime and replaces the broken copy the first time it starts, with nothing to install or delete by hand. The Lite engine was not affected.

Signed and notarized by Apple

Piixie for macOS is now signed by Data Giant S.L. and notarized by Apple, so it opens like any other app, without the “can’t check for malicious software” warning. Two small side effects of Apple’s stricter rules for notarized apps: deleting history moves files to the Trash without asking for Finder access, but Finder no longer offers Put Back for them; and when a website in the Secure Browser asks for the microphone or camera, macOS asks on Piixie’s behalf.

Windows stays on 0.3.0, which did not have this problem.

October 13, 2026 — Piixie 0.3.0

Licenses and subscriptions

Pro and Business can now be bought on the pricing page. After payment you get a license file to import in Settings → License; while the subscription is active the app renews the license by itself each month. Settings → License also has Buy a license and Manage subscription (invoices, payment method, cancellation). Without a license every feature still works and output carries a small “Redaction by Piixie.ai” watermark.

More accurate detection

Local models now only detect and classify personal data, and Piixie generates every replacement itself. On our 24-document multilingual test set, the share of personal data left in the output dropped from 10.0% to 0.7% with Local LLM (Medium) and from 10.8% to 3.5% with Local LLM (Small). Replacement IDs and IBANs are now always valid-looking, and the same person keeps the same fake name across the document. The Lite engine now also runs after the model as a safety net, adding anything the model missed.

Spreadsheets and SQL dumps

CSV, TSV, XLSX and .sql files are anonymized column by column, with the editor showing a grid and per-column rules. Cell data never reaches a model.

Windows

The Windows app now installs with a per-user installer (no administrator rights) that also sets up the WebView2 runtime if needed. Background helpers no longer open console windows, the Secure Browser works with Chrome, Edge, Brave, Firefox and Arc, app data moved to %LOCALAPPDATA%\Piixie, and the local model runtime no longer needs the Visual C++ redistributable.

macOS

Piixie now requires macOS 15 (Sequoia) or later. The Lite engine’s name detector ships inside the app on both Apple Silicon and Intel Macs.

June 12, 2026

Documentation overhaul

Expanded the docs with full sections for the editor (including drawing redactions and the highlighter), detection results, dictionaries, templates, deanonymization, reasoning models, batch output, and a set of end-to-end recipes.

June 11, 2026

Deanonymization (reverse)

Anonymization now has a return trip. Piixie can restore the original values in a previously anonymized document — using the exact run that produced it, or a dictionary of known swaps when the file was edited elsewhere. Dropped files are checked against history automatically, with a prompt to reverse instead of anonymize. Redaction runs stay one-way by design.

Dictionaries

Reusable original → replacement mappings that keep the same fake identities across documents and runs. A dedicated manager window to create, search, and curate them; profiles can reuse existing entries and grow a dictionary from each run.

Reasoning & extended thinking

Models can now reason before answering for better detection on tricky documents — local LLMs via llama.cpp, Anthropic extended thinking, and OpenAI reasoning effort. Set the effort per model (Off / Low / Med / High) and watch the thinking stream live in the processing dialog.

Batch output

Synthetic mode can generate several variants of one document in a single run, with configurable output file naming (number, hash, or date).

Anonymization Editor

Added a side-by-side editor that opens any completed document in its own window. Review the detected replacements as toggleable entries, add new ones by selecting text, and flip the Show redactions switch to eyeball the original against the redacted result instantly. Refresh regenerates the document into a versioned stash; Save to output promotes a version. Includes instant undo/redo (⌘Z / ⌘⇧Z).

Templates

Editor customizations can be saved as reusable templates — generalized rules (keep this value, synthesize every name, redact this pattern) that apply to a different-but-similar document, such as a recurring invoice layout.

More synthetic languages and redaction characters

Synthetic mode adds Portuguese, French, Italian, and German, plus Català, Euskera, and Galego regional name packs. Redaction now offers extra block and shade characters (█ ▓ ▒ ░ ▬), shared between the editor and profile settings.

May 25, 2026

Website and documentation launch

Added the first Piixie marketing site, download page, documentation hub, automation guide, architecture diagrams, product screenshots, and this changelog for future release notes.

Initial public release

Published Piixie’s local-first approach for people and organizations anonymizing documents before sending content to LLMs.

Pricing tiers documented

Published Free, Pro, Scale-up, and Enterprise tiers with daily local anonymization limits and central server options.