Privacy Policy

Last updated: September 21, 2026

JSON Dev Tools (jsondevtools.org) is a set of developer tools that run in your web browser. This page explains what happens to your data when you use them: what stays on your device, what is saved locally, and which third-party services see anything at all. It is written for the site as it actually works today.

1. The short version

• The tools process what you paste or upload in your browser. The site has no backend, no accounts, and no database, so there is no server that receives your input.
• The JSON Formatter saves the text in its input box in your browser's local storage so it is still there after a reload. That copy stays on your device and can be cleared at any time (section 3).
• Google Analytics and Google AdSense run on the site. They receive page views, device and browser details, and cookie identifiers. They do not receive what you paste into a tool.
• Share links put your JSON inside the link itself, so anyone you send the link to can read it (section 4).

2. Who is responsible for this site

The site is built and run by Pasindu Ishan, an individual based in Sri Lanka, and is the data controller for the limited information described here. You can reach me at pasindu98ishan@gmail.com about anything on this page, including a request to access or delete data.

3. What the tools do with your input

When you paste JSON, a token, a log line or any other input, the processing is done by JavaScript running in your browser tab. The text is not uploaded, logged or stored on any server operated by this site.

What is saved on your device

• Formatter input. The JSON Formatter stores the current contents of its input box in your browser's local storage (under the key formatterInput) so your work survives a page reload. It is never sent anywhere. The Clear button removes it, and you can also remove it by clearing this site's data in your browser settings. If you work with sensitive data on a shared computer, use Clear when you finish.
• Preferences. Settings such as dark mode, the auto-format switch, and a few tool options are also kept in local storage. They contain no input text.
• Other tools. The HTTP status quiz keeps your progress, and the mock data generator keeps its field setup, in local storage on your device.

Features that contact other servers

• Fetch from URL (JSON Formatter). If you use it, your browser requests the address you typed directly from that server. That server sees the request, as it would if you opened the address in a tab. Nothing passes through this site.
• Repair. The first time you use JSON repair, your browser downloads the open-source jsonrepair library from esm.sh. Some other pages load open-source libraries (for example Ajv, lz-string, js-yaml and an MD5 helper) from the jsDelivr and cdnjs content delivery networks. These requests carry no input text, but those providers see your IP address and browser details, as any web host does.

4. Share links

The formatter's Share button creates a link that contains your formatted JSON, compressed, after the # in the address. The part of a link after # is never sent to a web server by your browser, and this site's analytics code removes it from the page address it reports. The data is still fully readable by anyone who has the link, so treat a share link like a copy of the data itself and do not post one publicly if the JSON is sensitive.

Links created before September 21, 2026 carried the data in the query string (after a ?) instead. Opening such a link sent its contents to this site's host and could be recorded in analytics and server logs. If you shared sensitive JSON that way, consider it exposed to those logs and rotate any secrets it contained. Newer links no longer work this way, and old links are now cleaned from your address bar once they load.

5. Information collected automatically

The site is hosted on GitHub Pages. Like any web host, GitHub receives standard request data (such as IP address, browser and the pages requested) when you load a page, under GitHub's privacy statement. I do not have access to a log of individual visits from the host.

Google Analytics

I use Google Analytics 4 to see which pages and tools are used, roughly where visitors come from, and what devices they use. It sets cookies (such as _ga) and records page views and simple usage events, for example that the Format button was clicked or how long an input was. It does not record the text you enter. The page address sent to Analytics has any share-link data removed. You can opt out with the Google Analytics opt-out browser add-on.

Google AdSense

The site includes Google AdSense code. Where ads are shown, Google and its partners use cookies and similar identifiers to serve and measure ads and, unless you opt out, to personalise them based on your visits to this and other sites. I do not control those cookies. See How Google uses information from sites that use its services. You can manage personalised ads at Google Ads Settings, aboutads.info, or, in Europe, youronlinechoices.com.

6. Visitors in the EEA, UK and Switzerland

Where the law requires it, analytics and advertising cookies are only set after you give consent through the consent message shown on the site, and you can change or withdraw your choice at any time from the same message. For these cookies, consent is the legal basis for processing. Operating the site (serving pages and keeping it secure) relies on my legitimate interest in providing a working service. Under data protection law you may ask to access, correct or delete personal data held about you, object to processing, or complain to your local supervisory authority. Because I keep no accounts and no copy of your input, the only data I can act on is what Google Analytics holds against its cookie identifiers, and I can request its deletion on your behalf if you contact me.

7. How long data is kept

Text you enter is never received by me. Local-storage data lives on your device until you clear it. Analytics data is kept for the retention period configured in Google Analytics. Email you send me is kept only as long as needed to reply and follow up.

8. Children

The site is meant for developers. It is not directed at children under 13, and I do not knowingly collect data from them or direct ads at them.

9. Changes to this policy

If the site's behaviour changes in a way that affects this page, I will update it and change the "Last updated" date above.

10. Contact

Questions, requests, or a privacy concern: pasindu98ishan@gmail.com. See also the Terms of Service and the Contact page.