DevToolsKit

Privacy

The short version: nothing you type into a tool ever leaves your browser. Most pages carry ads; the tools you paste secrets into do not.

Your input

Text, files and images you provide to any tool on this site are processed entirely in your browser. They are never transmitted to us or to a third party, because the tools make no network requests once the page has loaded.

Storage on your device

The only thing stored locally is your light/dark theme preference, kept in localStorage so the site doesn't flash the wrong theme on your next visit. We set no cookies of our own, and Cloudflare's analytics sets none — but Google Analytics and Google's ads do; see below.

Advertising

Most pages carry ads from Google AdSense, which is what pays for the site. Google sets cookies and may use them to personalise the ads you see. You can review and change this at My Ad Center, and read how Google uses this data in its partner sites policy.

Some tools deliberately carry no ads and no Google scripts at all, because you paste secrets into them: the JWT decoder, password generator, hash generator, Base64 encoder, HMAC generator, TOTP generator and htpasswd generator. Ad scripts run in the same page as the tool, so on those pages we don't load them.

Analytics

We use Cloudflare Web Analytics to see which tools people actually use, so we know what to build next. It is cookie-free and does not fingerprint you, track you across other sites, or build any profile of you. It records the page you visited, the referring site, and coarse details like country, device type and browser — plus page-load timings.

Most pages also load Google Analytics, which does use cookies. It records the same kind of thing — which page, where you came from, roughly where you are — with IP anonymisation on. The credential tools listed below load neither it nor any other Google script.

It measures pages, never content. What you paste into a tool is not part of it, and cannot be: that data never leaves your browser in the first place.

Server logs

The site is hosted as static files on Cloudflare Pages. Cloudflare records standard request metadata — IP address, timestamp, requested path, user agent — as part of serving and protecting the site. That data is handled under Cloudflare's own privacy policy.

Third parties

Two: Cloudflare, as our host and analytics provider, and Google, for advertising and analytics. There are no other trackers or embedded assets from other domains, and we never share or sell anything ourselves — not least because we don't collect it.