Burner is a native Mac app for private AI chats. Names, clients, codenames, API keys, OAuth tokens, private endpoints, and acquisition targets are detected on-device and replaced with tokens before any text leaves this machine. The model reads structure. Your secrets stay on the disk.
Burner, while you type. Names, API keys and acquisition targets are caught and tokenized before the prompt ever leaves the disk — the model still gets a useful question to answer.
Not feature checklists. Constraints we'll defend when the easier thing is to compromise them. They limit what Burner can do — by design — so the things it can do, it does well.
Draft an incident note. The Project Halon API key sk_live_8a3df2c941b0 was exposed in the public repo last night. Affected accounts include Maria Chen at Northwind and Theo Vance at Bluefin. Sentinel's security lead (jamie@sentinel.co) wants a written summary by EOD.
Draft an incident note. The <Pr·1> API key <K·1> was exposed in the public repo last night. Affected accounts include <P·1> at <O·1> and <P·2> at <O·2>. <O·3>'s security lead (<E·1>) wants a written summary by EOD.
Burner's PII scanner runs on every keystroke. People, organizations, project codenames, emails, and credentials — API keys, OAuth tokens, cloud secrets, private keys — become type-preserving tokens. The remote model sees the shape of the problem; Burner reverses the tokens locally, so the conversation reads naturally — to you, and only to you.
Six months from now, a discovery request lands — for a deal that went sideways, a leak you didn't cause, a regulator on a fishing trip. The question becomes simple: what's discoverable about your customers in someone else's server logs? With Burner, the answer is on this page.
Produced in full. Verbatim. Maria, Theo, Sentinel, Project Halon, jamie@sentinel.co, sk_live_8a3df2c941b0 — searchable, time-stamped, attached to your user ID. Privilege already gone. The cheap reply was expensive after all.
Produced in full. Verbatim. Type-preserving placeholders for every person, org, credential, project, and email. The names, the API key, and the acquisition target never left this Mac. Discovery still happens. It just produces less.
Burner is model-agnostic. Short replies and edits go to Apple Foundation. Open-weight runs go through LM Studio or Ollama. The heavyweight reasoning lives on a remote — with the filter in front of it. The route is always visible, always reversible.
One email, ever. We never share it, never blast you, never sell the list. macOS 14+, Apple Silicon.