Last updated: May 3, 2026 · Effective: May 3, 2026
This Privacy Policy explains what information JSON Web Tools collects when you visit jsonwebtools.com (the "Service"), how that information is used, who it is shared with, and the rights you have over it. We have written this policy in plain language so you can understand exactly what happens to your data.
JSON Web Tools is an independent developer toolkit operated by Saurabh Goyal, based in India. References to "we", "our", or "us" in this policy mean the operator of jsonwebtools.com. You can reach us about any privacy matter at admin@jsonwebtools.com.
All JSON validation, formatting, conversion, diffing, schema generation, JWT decoding, and other tool operations run entirely on your device using JavaScript executed by your browser. The text and files you paste or upload into a tool are processed in memory on your machine. They are not uploaded to a server, transmitted to any third party, or retained by us once you close the tab.
Some tools optionally save your last input to your browser's localStorage so you do not lose work when you reload. This data lives on your device only and is removed when you clear site data through your browser settings.
Our hosting provider, Google Firebase Hosting, automatically records standard request logs that include your IP address, requested URL, HTTP status, user-agent string, and timestamp. These logs are used for security, abuse prevention, and to debug outages. They are retained for the duration set by Firebase (typically up to 30 days for raw logs) and we do not export, sell, or combine them with other data.
We use Google Analytics 4 (Measurement ID G-Z9PQ6ZW49X) to understand which tools are popular and where errors occur. The data collected includes:
_ga) used to recognise repeat visitsWe have enabled IP anonymisation and we have not enabled Google Signals, Advertising Reporting Features, or User-ID tracking. You can opt out by installing the Google Analytics Opt-out Browser Add-on, blocking third-party cookies, or using a content blocker.
We display advertisements served by Google AdSense (publisher ID ca-pub-3346688027347512). Google and its certified advertising partners may set or read cookies on your browser to:
The third-party vendors and advertising network technologies used by Google are listed at Google's certified ad technology providers. You can review and adjust how Google personalises ads to you at adssettings.google.com, and you can opt out of personalised advertising from many networks at the DAA opt-out and Your Online Choices (EU) pages. Where required by law, we ask Google to serve only non-personalised ads to visitors from regulated regions until consent is given.
If a tool throws an unhandled exception, an error event may be sent to Google Analytics with the error message and the URL where it occurred. Error events do not include the JSON content you were processing.
The following cookies and storage entries may be set when you visit the Service:
You can clear all cookies and local storage for jsonwebtools.com from your browser's site settings at any time. Doing so will not affect your ability to use the tools.
We use the limited information described above to:
Our lawful basis under GDPR is our legitimate interest in operating and improving a free public service, balanced against your privacy. For advertising cookies that are not strictly necessary, the lawful basis is consent where required by your local law.
We do not sell, rent, or trade personal information. We share limited technical information only with the service providers needed to run the site:
We may disclose information if required by valid legal process, to protect against fraud or abuse, or to enforce our Terms of Service. Because we do not collect identifying information directly, such disclosures will be limited to what is technically available (e.g., a server log line for a specific IP and timestamp).
Google's services are operated globally, which means information processed by Google Analytics, AdSense, and Firebase may be transferred to and stored in the United States or other countries where Google operates. Google maintains contractual and technical safeguards including the EU Standard Contractual Clauses for transfers out of the European Economic Area and the United Kingdom.
To exercise any of these rights, email admin@jsonwebtools.com. We will respond within 30 days. If you live in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your national Data Protection Authority.
California residents have the right to know what personal information has been collected, the right to delete that information, the right to correct inaccurate information, and the right to opt out of the "sale" or "sharing" of personal information. We do not sell personal information. Some advertising cookies set by Google AdSense may qualify as "sharing" under the CPRA's broad definition. To opt out, visit adssettings.google.com or email us with the subject line "Do Not Sell or Share My Personal Information".
The Service is intended for software developers and is not directed at children under 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided information through our Service, please contact us and we will delete it.
Connections to jsonwebtools.com are encrypted with HTTPS using a TLS certificate provisioned by Google Firebase. Because the JSON content you process never leaves your browser, the most sensitive data stays on your device. We rely on Google's infrastructure security for the limited analytics and advertising data described above.
Server access logs are retained for up to 30 days. Google Analytics events are retained for 14 months by default before automatic deletion. AdSense cookies expire according to the lifetimes published by Google (typically 13 months or less). LocalStorage entries persist on your device until you clear them.
We may update this Privacy Policy when we add features, change service providers, or to reflect legal requirements. The "Last updated" date at the top reflects the most recent revision. Material changes will be highlighted on the homepage for at least 14 days. Continued use of the Service after a change indicates acceptance of the updated policy.
For privacy questions, data subject requests, DMCA notices, or any other inquiry related to this policy, contact: