Is this true? :) I am not sure we can guarantee it, maybe state what will be scrubbed (email addresses, anything that looks like an email address, url, etc.) Might be worth mentioning that there are certain fields that are free-form and may contain info from users, that could literally have anything in it. Are we attempting to scrub out regexes from comments or just certain field names like email and url?