Privacy Policy

The short version: what you type into a tool — a JWT, a password, a connection string — is processed entirely on your device and never transmitted anywhere. This page covers everything else: analytics, cookies, and advertising.

last updated: 2026-09-12

// data you paste into a tool

Every tool on this site — the JSON formatter, JWT decoder, password generator, hash generator, diff checker, and the rest — runs entirely in your browser using JavaScript. Whatever you type or paste into a tool is processed on your own device and is never sent to any server, ever.

The one exception is share-pad's optional 6-digit code mode, which is explicit about what it does: your text is encrypted in your browser before it's sent anywhere, and the server stores only that ciphertext, never your plaintext. Text stored this way is automatically deleted after 30 days regardless of whether the code was ever used, and there is no way for anyone to browse or search stored text — only the exact code retrieves it. This isn't end-to-end encryption between two people who never trust a third party (the code that unlocks it is stored right alongside it), so still don't use it for real secrets — that tool's own page explains the exact limits before you use it. Its offline-link mode, and every other tool on the site, never touches a server at all.

// analytics

This site uses Vercel Web Analytics and Vercel Speed Insights to see which pages get visited and how fast they load. Both are designed to be cookieless: they don't use persistent identifiers or build a profile of individual visitors, and they don't collect the content of anything you type into a tool. What they do collect is aggregate, page-level data — which pages were viewed, and basic performance timing.

// cookies and local storage

This site does not currently set any cookies of its own. It does use your browser's localStorage — data saved on your own device, never transmitted to a server — for a few conveniences: remembering your dark/light mode preference, a short list of your recently-visited tools, and (on some tools) form field values you've entered, so they're still there if you come back. All of this stays on your device and can be cleared at any time by clearing your browser's site data.

// advertising

This site works with Google AdSense to display ads once approved and active. Third-party vendors, including Google, use cookies to serve ads based on a visitor's prior visits to this website or other websites on the internet. Google's use of an advertising cookie enables it and its partners to serve ads to visitors based on their visits to this site and other sites on the internet.

For visitors in the European Economic Area, the UK, or Switzerland, ads will only be personalized with consent obtained in compliance with Google's EU User Consent Policy — no cookie is set for ad personalization, and no data is used for that purpose, without it.

You can opt out of personalized advertising by visiting Google's Ads Settings, or generally at aboutads.info. This section will be updated with the specific ad network(s) in use once ads are active on this site.

// third-party services

what's loaded from elsewhere, and why
VercelThis site is hosted on Vercel, which operates the servers that serve these pages and (for share-pad's code mode only) the temporary text store.
ResendThe contact page sends your name, email, and message to a function on this site, which relays it through Resend, an email-delivery service, to an inbox — the only page here that sends anything to a server.

// children's privacy

This site is not directed at children under 13, and it does not knowingly collect personal information from anyone in that age group. Since there are no accounts and no personal data collected outside of what's described above, there's nothing to knowingly collect in the first place.

// your rights, and what there isn't to request

There's no account system, no user database, and no persistent identifier tied to you individually — so there's generally nothing stored about you to access, correct, or delete. The two exceptions are things you control directly: localStorage, which you can clear from your own browser at any time, and a share-pad code, which you can simply not share further and which expires on its own after 30 days. If you believe something described here isn't accurate, or you have a request related to data you think this site holds, use the contact page. This site does not sell personal information.

// changes to this policy

This policy may be updated as the site changes — most likely as advertising is introduced. The "last updated" date at the top of this page reflects the most recent revision.

// contact

Questions about this policy can be sent through the contact page.