Data re-identification methods are becoming increasingly sophisticated and can lead to disastrous data breaches. Re-identification is a key research topic for computer scientists as it can be used to reveal vulnerabilities of de-identification methods such as anonymisation or pseudonymisation. However, re-identification, even for research purposes, involves processing personal data.
This research paper examines a critical privacy challenge related to LINKABILITY — the ability to connect two pieces of information to the same person.
anonym.legal addresses this through 260+ entity types with 3-layer hybrid detection accessible via 6 platforms including Chrome Extension for real-time browser anonymization.
The ability to connect two pieces of information to the same person. This is the foundational operation that makes PII dangerous. Nearly every pain point is an expression of linkability being created, exploited, or failing to be broken.
Irreducible truth: You cannot have useful data that is completely unlinkable AND completely useful. The very features that make data informative make it linkable. This is not a bug — it is information theory. The information content of a dataset and its linkability are the same property measured differently.
anonym.legal identifies 260+ entity types including advertising IDs, cookie identifiers, browsing interests, location markers, bid request parameters. The 3-layer hybrid (Presidio + NLP + Stance classification) architecture uses Microsoft Presidio deterministic rules with checksum validations (Luhn, RFC-822) for structured identifiers and XLM-RoBERTa + Stanza NER with Stance classification for disambiguation for contextual references.
Redact is recommended for this pain point: removing PII before it enters advertising pipelines prevents the 376-times-daily broadcast of personal information. Replace provides an alternative — substituting identifiers with non-trackable alternatives enables advertising analytics without individual targeting. For scenarios requiring reversibility, Encrypt (AES-256-GCM) enables authorized recovery of original values.
The REST API (Basic plan+, €3/month) provides programmatic PII detection with Bearer token auth. Rate limited to 100 req/min, max 100 KB per request — the most accessible API entry point in the ecosystem.
This pain point intersects with GDPR Article 6 lawful basis, ePrivacy Directive consent for tracking, Article 7 consent conditions.
anonym.legal’s GDPR, HIPAA, PCI-DSS, ISO 27001 compliance coverage, combined with Hetzner Germany, ISO 27001 certified hosting, provides documented technical measures organizations can reference in their compliance documentation and regulatory submissions.
| Specification | Value |
|---|---|
| Platform Version | v7.4.4 |
| Entity Types | 260+ |
| Detection Layers | 3-layer: Presidio + NLP + Stance classification |
| Accuracy | 95.5% tested (42/44 tests) |
| Languages | 48 |
| Anonymization Methods | Replace, Redact, Mask, Hash (SHA-256/512/MD5), Encrypt (AES-256-GCM) |
| Platforms | Web App, Desktop, Office Add-in, MCP Server, Chrome Extension, REST API |
| Pricing | Free €0, Basic €3, Pro €15, Business €29 |
| Hosting | Hetzner Germany, ISO 27001 |
| Compliance | GDPR, HIPAA, PCI-DSS, ISO 27001 |