Privacy

devtools.codes is operated by a student, working on it independently rather than as a company. For the purposes of the data protection law described below, devtools.codes is the data controller for the personal information this policy covers. You can get in touch through the contact page, or by writing to feedback@devtools.codes.

We have no establishment in the United Kingdom or the European Union. Because this site is offered to people in those places, the UK GDPR and the EU GDPR still apply to it, under Article 3(2) of each.

You can reach us at feedback@devtools.codes.

Your tool input is processed locally in your browser and is not intentionally uploaded to our servers.

Advertising and analytics providers may still process normal page, device, cookie and network information.

There is no account, no login and no database. Nothing you type or paste into a tool is sent to us, stored by us, included in measurement or passed to advertising. Google Analytics and Google AdSense may process ordinary page, device, cookie and network information only after the matching choice is granted.

Every tool on this site runs in your browser. The text you paste, the schema you build and the file contents you check are processed by code running on your own device. They are not transmitted to a server we control, they are not written to any storage, and they are never included in an analytics event.

The wording above says your input is not intentionally uploaded rather than promising that nothing ever leaves your browser. That distinction is deliberate. We can be precise about what our own code does, and our code makes no request carrying your input. We cannot make an absolute promise about every browser extension, corporate proxy or network device between you and this page.

Downloads are produced in your browser and saved directly by it. They do not pass through us.

Two small items are stored in your browser local storage: your theme choice, and your cookie decision. Neither is a cookie, neither is sent anywhere, and neither contains anything that identifies you.

If you agree to analytics, Google sets two cookies on this site. The cookie policy lists all four items, what each is for, and how long each lasts.

If, and only if, you choose Accept in the cookie banner, this site loads Google Analytics 4. Until you make that choice, no analytics script is loaded and no request is made to Google at all.

Google Analytics records which pages are viewed and when, along with information your browser provides: device and browser type, screen size, language, the page that referred you, and an approximate location derived from your IP address. It sets a randomly generated identifier so that repeat visits can be counted without knowing who you are.

We have configured it to send nothing beyond page views. Google Signals and advertising personalisation are switched off. No tool input, no tool output, and nothing derived from either is ever included in an event. Page addresses are recorded without their query string or fragment, so that even a future feature putting content in a web address could not leak it into a measurement.

Analytics does not run at all on the Secret Scanner or on its two guide pages, whatever your cookie choice. Those pages are where people paste live credentials, and we would rather carry no measurement there than qualify that promise.

You can withdraw consent at any time using the Cookie preferences control in the footer of every page. Measurement stops immediately, the Analytics script is removed, and the cookies it set are deleted. You do not need to reload the page.

This site uses Google AdSense in two explicit positions: below the tool directory on the homepage and between the questions and related-tools sections on ordinary tool pages. No advertisement is placed beside an input, action or result.

The AdSense script, its reserved space and any ad request are withheld until you allow Advertising. In the EEA, the United Kingdom and Switzerland, Google’s published Privacy & messaging consent message may then ask for the additional choices required by its advertising vendors. Google and approved vendors may process ordinary page, device, cookie and network information according to those choices. No tool input, tool output or value derived from either is supplied to them.

Advertising is never enabled on the Secret Scanner or its two guide pages. Those routes contain no ad unit and do not load the AdSense script, regardless of your choice.

The site is hosted by Vercel. Every page is generated in advance, so no code we wrote receives what you type. Vercel does, however, handle the request for the page itself, and its infrastructure records ordinary technical information in the process: your IP address, the address you requested, and your browser user agent.

This is standard server logging, it happens for every website you visit, and it is necessary to deliver the page to you. It is separate from analytics and is not affected by your cookie choice. We rely on our legitimate interest in operating and securing the site as the basis for it.

Analytics relies on your consent, under Article 6(1)(a) of the UK GDPR and regulation 6 of the Privacy and Electronic Communications Regulations. You give it by choosing Accept, and you can withdraw it at any time without penalty.

Advertising also relies on consent. The site-level Advertising choice controls whether any ad code can load, and Google’s certified consent message records the additional vendor and purpose choices where it applies.

Your theme choice and your cookie decision are stored under the strictly necessary exemption in those same regulations. A record of your cookie decision is expressly permitted, and a theme preference is stored only because you asked for it by using the control.

Hosting logs rely on our legitimate interest in delivering, operating and securing the site.

Your cookie decision is kept for 12 months. After that the banner returns, showing your previous answers, and asks again. It also returns early if we change the services we use, because a decision made about one set of services does not carry over to another.

Analytics data is retained by Google for the retention period configured on our Analytics property, after which Google deletes it automatically. Aggregated reports we have already viewed are not personal data and are not affected by that deletion.

Your theme choice stays in your browser until you clear site data. We never see it.

There are two transfers to be aware of, and we would rather state both plainly than mention only the convenient one.

The first is Google. It processes Analytics data on servers outside the United Kingdom, including in the United States. Those transfers are covered by Google data processing terms, which incorporate the International Data Transfer Addendum to the European Commission standard contractual clauses.

The second is us. We are based in Pakistan, which is not covered by a UK or EU adequacy decision, and we read the aggregated Analytics reports from there. So if you accept analytics, information about your visit is accessible from a country without an adequacy finding.

If you would rather neither transfer happened, decline analytics. Nothing is sent to Google, and nothing about your visit becomes available to us.

Under the UK GDPR you have the right to ask for a copy of your personal information, to have it corrected or erased, to restrict or object to how it is used, to receive it in a portable form, and to withdraw consent at any time.

There is an honest limitation worth stating. We hold no account, no email address and no name for you. The analytics identifier is random, is stored only on your own device, and means nothing to us in isolation. In most cases we would have no way to find your data or to confirm it was yours, and the law does not require us to collect extra information simply to make you identifiable.

In practice, the fastest way to exercise most of these rights is to open Cookie preferences and turn Analytics off, which stops the collection and deletes the cookies, or to clear site data in your browser, which removes everything this site has stored. If you would like us to try to act on a request, write to feedback@devtools.codes and we will respond within one month.

If you think we have handled your information badly, please tell us first at feedback@devtools.codes so we have the chance to put it right.

You also have the right to complain to a data protection regulator. In the United Kingdom that is the Information Commissioner, at ico.org.uk or on 0303 123 1113. In the European Union it is the supervisory authority for the country you live in. Complaining to us first is not a precondition.

This site is a set of developer utilities and is not directed at children. We do not knowingly collect information from anyone under 13.

If we change how information is handled, we will update this page and change the date shown at the top. A change that affects what you consented to will also increase the cookie policy version, which brings the banner back and asks you again rather than assuming your previous answer still applies.