v1.1.0 — Linkable PII Detection

Individual data points like a zip code or age aren't personally identifiable on their own — but combined, they can uniquely identify someone. Research by Latanya Sweeney showed that zip code + date of birth + gender identifies 87% of the US population.

This update adds detection for data combinations that create re-identification risk, aligned with NIST SP 800-122, GDPR Recital 26, and CCPA guidelines.

New detections:
- ZIP/postal codes
- Age mentions ("age 34", "34 years old")
- Gender fields ("gender: male", "sex: female")
- Street addresses

Linkability analysis:
- 2 quasi-identifiers together → warning before sending
- 3+ quasi-identifiers or a known high-risk combination (e.g. zip + DOB + gender) → send blocked until PII is removed
- Banner now shows which data points triggered the warning with the relevant compliance framework

All detection continues to run entirely in the browser. No data leaves your machine.