Privacy
Privacy Policy
Last updated: 2026-04-05
Summary
JSONCraft is a collection of developer tools (JSON, YAML, TOML, XML, CSV, regex, base64, hash, etc.) that run entirely in your browser. We do not collect, store, or transmit the data you paste into any tool.
Data we do not collect
- No analytics. No cookies for analytics or tracking.
- No server-side logging of JSON, YAML, passwords, tokens, or any data you process.
- No account system — you don't provide us any identity.
- No hidden server calls. Every tool runs 100% in your browser.
Third-party services we use
JSONCraft is designed to be fully client-side. We use a minimal set of external services only for rendering and ad delivery:
- Self-hosted fonts — Inter and JetBrains Mono fonts are served directly from our servers. No external font services are used.
- Google AdSense (Google, US) — displays ads. Only loaded after you explicitly accept cookies.
- Cloudflare (EU) — hosting and CDN. Standard web server logs (IP, path, user-agent) may be retained by Cloudflare per their policy.
- Formspree (EU) — feedback form submissions. Only invoked when you submit the feedback form in the footer.
Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to users based on their visit to this site and/or other sites on the Internet. Users may opt out of personalized advertising by visiting Google Ads Settings. Alternatively, users can opt out of a third-party vendor's use of cookies for personalized advertising by visiting www.aboutads.info.
Named processors and international transfers
The third parties listed below process limited data on our behalf. All US-based processors are certified under the EU-US Data Privacy Framework (DPF), the lawful transfer mechanism since July 2023.
| Processor | Purpose | Legal basis | Retention | Transfer |
|---|---|---|---|---|
| Google LLC (Google AdSense, USA) | Display advertising | Consent (GDPR Art. 6(1)(a)) | Up to 13 months (Google default) | DPF |
| Google LLC (Funding Choices CMP, USA) | Cookie consent management (TCF v2.2) | Legal obligation (ePrivacy) | Session | DPF |
| Google LLC (Google Analytics 4, USA) | Aggregate audience measurement (IP-anonymised) | Consent in EU/EEA/UK; legitimate interest elsewhere | 14 months | DPF |
| Cloudflare, Inc. (USA, EU edge) | Hosting, CDN, security, anonymous request metrics | Legitimate interest (GDPR Art. 6(1)(f)) | Aggregate logs, ≤30 days | DPF + EU DPA |
| Formspree.io (USA) | Footer feedback form submissions (only when you submit) | Consent (GDPR Art. 6(1)(a)) | Per Formspree policy | DPF |
Right to object (GDPR Art. 21): you may object to any processing based on legitimate interest at any time by contacting us via the footer form. Right to withdraw consent (GDPR Art. 7(3)): you may withdraw consent at any time via the cookie banner (it reappears when you clear localStorage for this site). Withdrawal does not affect lawfulness of processing prior to withdrawal.
Advertising (Google AdSense)
We use Google AdSense to show advertisements. AdSense sets cookies and may use your IP address to serve personalized ads. These cookies are only loaded after you explicitly accept the consent banner. If you decline, no AdSense scripts are loaded.
More info: Google Ads privacy policy.
Local storage
We store two small values in your browser's localStorage:
jsoncraft-theme— your preferred color theme (light or dark).cookie-consent— whether you accepted or declined the cookie banner.
These values never leave your browser.
Your rights (GDPR)
Because we store no personal data, there is nothing to access, delete, or export. You can withdraw consent for AdSense cookies at any time by clearing your browser's localStorage for this site — the consent banner will reappear on your next visit.
Contact
Questions? Use the feedback form in the footer.
By Marco B. ·