Masking is reversible and detection may miss things. Check the detected items before you share.
What goes through Moon Blur
Your messages and the whole conversation history, the text of the documents you attach, the tool results sent back to the model (pages read, searches…) and background tasks such as the conversation title. Agents, routines and linked messaging apps also go through Moon Blur. Under a message you sent, the “Moon Blur masked” note gives the number of protected items; “Show” opens the detail: “What the model received instead”, and “Show the message sent to the model”.
What is not analysed
Moon Blur only reads text. The images and photos you attach, the tab captures of the Moon AI extension for Chrome and voice (dictation and read aloud) are sent without being analysed; only the metadata of images (where the photo was taken, the device) is removed. Detection is automatic: data written in an unusual way may slip through; the badge shows what was protected.
What leaves unmasked
The real values go back out when an action sends them outside Moon AI: your connected services (connectors), web searches, the descriptions of images and videos to create, the photos to edit (without their metadata). Answers on Telegram may go through our provider for connected services. The webhook of your notifications receives the title and text of the answer, the detected data replaced by a label. The names of your mailboxes and MCP servers are sent as they are. Moon CLI masks on your computer: by default secrets and bank numbers only, nothing in off mode.
Your own data to mask
In “Settings” › “Data and privacy” › “Moon Blur”, “Your data to mask” holds your own terms: client names, project names, internal codes, addresses… Moon Blur always replaces them before sending to the model, ignoring case and accents, as whole words. Paste several at once, one per line. The list is personal and applies when the plan of the active workspace includes it; otherwise it is kept but not applied. The message badge shows them as “From your list”. The developer API and Moon CLI do not use it. Moon Blur (Moon AI app)
Included depending on the workspace’s plan: your own list of data to mask. Compare plans
Labels in quotes are those of the app in English as of November 14, 2026; the app opens in French until you choose English in Settings. Links followed by an arrow open the app, which may ask you to sign in.
Your turn.
Open Moon AI to try these steps in your workspace, or go back to the help center for another topic.
How it works
E-mail addresses, phone numbers, postal addresses, ID, social security, bank or company numbers… are detected and replaced with tokens before sending: the model never sees these values. Names of people, clients or projects are not detected on their own: add them to “Your data to mask”. A given value keeps the same token across the conversation, so the model can follow along. It is always on, whatever the plan, with nothing to set: “Protected by Moon Blur” shows under the message box.