Data Mask Studio
gustavo-wallace.github.io
What it is
Data Mask Studio is a free Windows desktop application for masking sensitive data in CSV files and local HTML content. Users can choose columns to preserve, mask, or exclude; normalize, rename, or compose columns; and reuse profiles for batch work. CSV files can be processed individually or in batches, with selective restoration available later. Its deterministic tokens can keep repeated values consistent across records and files. The app can also restore known codes in local HTML files and dashboards while preserving their markup. Original values and mappings remain in an encrypted local vault, which is needed for restoration. The maker says tokens use HMAC-SHA256, vault data uses AES-256-GCM, and Windows DPAPI protects local keys. Processing stays local, without telemetry or automatic synchronization. Additional tools include password-protected portable backups, vault integrity audits, diagnostics, temporary-file cleanup, and controlled compaction. Large files use bounded-memory streaming. Releases offer a per-user Windows installer and portable ZIP. The app is licensed under GPL-3.0-only. It does not guarantee irreversible anonymization, and its executables are not digitally signed yet, so Windows may show a SmartScreen warning.
Spec sheet
- Purpose
- Data Mask Studio is a local-first Windows desktop app for preparing and masking sensitive datasets while preserving correlations between repeated values.Read 7 Oct 2026 · gustavo-wallace.github.io
- Privacy
- Processing stays on the local machine, with no telemetry or automatic synchronization of sensitive information.Read 7 Oct 2026 · gustavo-wallace.github.io
- License
- The app is distributed under GNU General Public License v3.0 only, while third-party components retain their own licenses.Read 7 Oct 2026 · gustavo-wallace.github.io
- Backups and maintenance
- Password-protected portable backups, vault integrity checks, diagnostics, temporary-file cleanup, and controlled compaction are available.Read 7 Oct 2026 · gustavo-wallace.github.io
- Cryptography
- The site says tokens use HMAC-SHA256, vault data uses AES-256-GCM, and local keys are protected with Windows DPAPI.Read 4 Oct 2026 · gustavo-wallace.github.io
- CSV workflows
- It supports individual and batch CSV masking, assisted column detection, and streaming processing for large files.Read 7 Oct 2026 · github.com
- Data preparation
- Users can preserve, mask, or exclude columns, normalize values, rename or compose columns, and reuse profiles for batch processing.Read 7 Oct 2026 · gustavo-wallace.github.io
- Deterministic masking
- It generates consistent tokens so repeated values can remain correlated across records and files.Read 4 Oct 2026 · gustavo-wallace.github.io
- Deterministic tokens
- Tokens use keyed HMAC-SHA256 and configured prefixes to keep repeated values consistent for analysis.Read 7 Oct 2026 · gustavo-wallace.github.io
- Distribution
- Each release provides a per-user Windows installer and a portable ZIP package.Read 4 Oct 2026 · github.com
- Downloads
- Each release offers a per-user Windows installer and a portable ZIP package.Read 7 Oct 2026 · github.com
- Encrypted vault
- Original representations and mappings are kept in an encrypted local vault, with restoration requiring access to that vault.Read 4 Oct 2026 · gustavo-wallace.github.io
- Executable signing
- The executables are not digitally signed yet, so Windows may display a SmartScreen warning.Read 7 Oct 2026 · github.com
- HTML restoration
- It can restore known codes in local HTML files and dashboards while preserving document markup.Read 4 Oct 2026 · gustavo-wallace.github.io
- Large files
- The README says processing uses bounded-memory streaming for large files.Read 4 Oct 2026 · github.com
- Limitations
- The distribution targets Windows because it relies on Windows DPAPI; it has no synchronization, telemetry, automatic updating, or remote key recovery.Read 7 Oct 2026 · github.com
- Limits
- The distribution targets Windows because it relies on Windows DPAPI; it has no synchronization, telemetry, automatic updating, or remote key recovery.Read 4 Oct 2026 · github.com
- Restoration
- The app can restore selected CSV data and known codes in local HTML files while preserving document markup.Read 7 Oct 2026 · gustavo-wallace.github.io
- Security caveat
- The maker says the product does not guarantee irreversible anonymization, and the executables are not digitally signed yet.Read 4 Oct 2026 · gustavo-wallace.github.io
- Vault security
- Original information is stored in an authenticated AES-256-GCM encrypted local vault, with local keys protected by Windows DPAPI.Read 7 Oct 2026 · gustavo-wallace.github.io
Plans and prices
Strong points and limits
Strong points
- Processes CSV files individually or in batches.
- Repeated values can remain consistent across files.
- Restores known codes in local HTML while preserving markup.
- Processing stays local, without telemetry or automatic synchronization.
- Offers installer and portable ZIP releases.
Limits
- Targets Windows because it relies on Windows DPAPI.
- No synchronization or remote key recovery.
- Executables are not digitally signed yet.
- Does not guarantee irreversible anonymization.
Who it suits
Data Mask Studio suits Windows users who need local CSV masking or restoration in CSV and local HTML content. Its profiles and batch processing may help users who repeat data-preparation workflows.
Verdict
Data Mask Studio provides local masking and restoration workflows with an encrypted vault and no telemetry. It is Windows-only, and users should account for the maker's anonymization caveat and the unsigned executables.
Where Specifiction places it
- Data Masking Software#5 of 268.3