Privacy

Every tool here runs in your web browser. What you type, paste or choose (text, files, images, certificates, tokens) is processed on your own device and is never uploaded: there is no server-side code to send it to.

• No tracking. There are no analytics, advertising or social media scripts, and no cookies.
• No third-party requests. Fonts, scripts and images all come from this site. The Buy me a coffee link goes to buymeacoffee.com only if you click it; nothing is loaded from there before then. The feedback links likewise go to GitHub only when clicked, and GitHub’s own privacy terms apply there.
• Settings stay on your device. Tool settings (such as indent size or chart options), Text Cleaner recipes, recently used and pinned tools, how many times you’ve used each tool, the sidebar’s open sections and your theme are kept in your browser’s local storage. Only you see them, and you can clear them or turn them off below.
• A content security policy backs this up. The pages tell the browser not to let scripts send data to any other site and not to submit forms anywhere.

The Web Scratchpad and the Markdown & HTML Preview are an exception you control. They run in a sandbox that can’t reach the rest of the page, and by default nothing in it can load from another site either, so pasted HTML can’t track you with a remote image. Tick Allow external resources (Scratchpad) or Load external resources (Preview) and a script, stylesheet, font or image that your code or Markdown asks for is fetched from that site.

Image Convert / Resize can also load a picture from a web address you type. It asks that site for the image, as your browser would if you opened the link, and sends nothing else; the image you get back stays in your browser. So the policy on that page allows requests to https:// sites. Choosing a file instead never contacts anyone.

Sharing a tool’s input

Some tools have a Copy a link to this input button. It makes a link holding what’s in the tool’s fields, so that whoever opens it sees the same input and result. Nothing is stored anywhere: the input travels in the link itself, after the #, a part of an address that browsers never send to a server. The button only makes the link; it’s yours to paste, and the site never changes the address on its own.

A link is still a copy of your input. Anyone you send it to can read it, and it stays in the browser history of whoever opens it, so share only what you’d be happy to paste into a message. That’s why the button is offered only by tools whose input isn’t usually private: Barcodes, Caesar / ROT13, Calculator, Case & Style, Cipher Cracker, Classical Ciphers, Code Format, Colour Converter, Cron Explainer, Date Calculator, Enigma Machine, HTTP Codes & MIME Types, JSON Format, JSON ⇄ YAML ⇄ TOML, List Compare, Markdown Table, Morse Code, Number Bases, Number Codes, Numerals, Permissions, Picture Alphabets, Random Picker, Regex Tester, Subnet Calculator, Test Data Generator, Timestamp Converter, Truth Table, URL Encode/Decode, URL Inspector, UUID Generator, Unit Converter, User Agent Parser, World Clock, XML Format and docker run to Compose. Tools for tokens, passwords, keys, encryption or files never offer it. Links are limited to 4,000 characters.

Your data on this device

Clear my data removes everything this site keeps in this browser. Don’t store anything does the same and stops it keeping anything more, at the cost of your theme and tool settings resetting on every visit. To remember that choice, the site keeps one item saying so; untick the box to remove it.

Checking for yourself

Open your browser’s developer tools at the Network tab, then use any tool. After the page has loaded, no further requests are made. The Application (or Storage) tab shows what’s kept in local storage.

Check it offline. Once a page has loaded, disconnect from the internet (Wi-Fi, network cable, mobile data and all) and use any tool: it still works, because nothing needs to leave your device. Use it offline explains how, and how to install the site as an app.