Privacy Policy

The short version

Anything you type or paste into a tool on this site stays in your browser and is never sent to us. A couple of tools can make a real request to a third-party service, but only to a public, non-personal endpoint and only when you explicitly press a button for that purpose — never automatically, and never through any server we run. See "Data you enter into tools" below for exactly which tools and what that sends. Separately, one tool — Browser Fingerprint Inspector — shows you request metadata (your IP address and the headers your browser sends) that our own server already receives on any ordinary page load, on this or any other site; see "Data your request already sends us" below for what that means in practice. Separately again, like most websites, we collect basic anonymous traffic statistics and show advertising — both are described in full below.

Data you enter into tools

Every tool's own logic runs as JavaScript inside your own browser. There is no server-side processing, database, or logging of what you type or paste into a tool — see "Data your request already sends us" below for the one exception on the site, which is unrelated to tool input. When you paste JSON, a token, a password to hash, or any other content into a tool:

• It is processed locally by your browser and then discarded when you close or reload the page.
• It is never sent to us, and by default never sent to any third party either.
• It is never stored, logged, or retained in any form on our end.

Two tools are the exception, and both make that exception obvious rather than hiding it: cURL Command Builder's "Send request" button fires the request you built directly from your browser to whatever URL you entered, and Bundle Size Checker's "Check size" / "Check all dependencies" buttons send the package name(s) or dependency list you entered to the public npm registry and to esm.sh (which bundles the package) so it can measure the real size. Neither goes through any server we run, and neither fires from just typing — only from pressing that specific button. A package name isn't personal data the way a password or a private document is, so we don't consider this a change to the commitment above, but we would rather say so plainly than have the absolute version of this claim be technically inaccurate.

You can verify all of this independently by opening your browser's developer tools, going to the Network tab, and using any tool on the site.

Data your request already sends us

This is a different category from the tool input above, and only one tool involves it: Browser Fingerprint Inspector's "Network request" section. Loading any web page — this one included — sends your IP address and a set of standard headers (like your browser's User-Agent and language) to whichever server hosts it, purely as part of how HTTP works. That is true of every site you visit, not something specific to this one. What is specific to this one tool is that we show it back to you: a small Cloudflare Worker reads that information off the request for that one page and writes it into the page's own HTML before it reaches your browser, so you can see exactly what any server — including ours — already sees. This makes no additional request beyond the one that was already loading the page, and nothing from it is logged, stored, or retained anywhere on our end; reload the page and the server has forgotten it just as it would for any other page view. Every other tool and every other page on this site never triggers this at all.

Analytics

We use Cloudflare Web Analytics to understand which pages are used and how quickly they load. It is cookieless and does not fingerprint or track individuals across sites. It records aggregate information such as page URL, referring site, country, browser type, and page-load timings. It does not record anything you type.

Advertising

This site is funded by display advertising served by Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to this and other sites.

You can opt out of personalised advertising by visiting Google Ads Settings, or opt out of third-party vendors' use of cookies for personalised advertising at aboutads.info.

If you are in the European Economic Area, the United Kingdom or Switzerland, you will be asked for consent before any personalised advertising cookies are set, and you can change or withdraw that consent at any time.

Local storage

The site stores a single value in your browser's local storage: your light or dark theme preference. It never leaves your device and is not used to identify you. If you have not chosen a theme, nothing is stored at all.

Your rights

Because we do not collect personal data through the tools, there is generally no personal data of yours for us to access, correct, or delete. For the advertising cookies described above, your choices are managed through the consent controls and the opt-out links in that section.

Changes

If this policy changes materially, the "last updated" date above will change. The commitment that we never receive or store what you type into a tool is architectural for every tool but one, and is not something we intend to alter. The exceptions described above are all documented on each tool's own page: two are narrow, explicit-action requests that send data you provide to a public third-party service, not to us; the third is Browser Fingerprint Inspector's "Network request" section, which sends nothing anywhere but simply shows you request metadata our own server already receives on any page load, on this site or any other.