Privacy

devtools.codes is operated by Sajid Israr, an individual based in Pakistan. For the purposes of the data protection law described below, Sajid Israr is the data controller for the personal information this policy covers.

We have no establishment in the United Kingdom or the European Union. Because this site is offered to people in those places, the UK GDPR and the EU GDPR still apply to it, under Article 3(2) of each.

You can reach us at sajidisrar86@gmail.com.

Your tool input is processed locally in your browser and is not intentionally uploaded to our servers.

Advertising and analytics providers may still process normal page, device, cookie and network information.

There is no account, no login and no database. Nothing you type or paste into a tool is sent to us, stored by us, or included in any measurement. The only information we collect is the ordinary page and device information that Google Analytics gathers, and only if you agree to it.

Every tool on this site runs in your browser. The text you paste, the schema you build and the file contents you check are processed by code running on your own device. They are not transmitted to a server we control, they are not written to any storage, and they are never included in an analytics event.

The wording above says your input is not intentionally uploaded rather than promising that nothing ever leaves your browser. That distinction is deliberate. We can be precise about what our own code does, and our code makes no request carrying your input. We cannot make an absolute promise about every browser extension, corporate proxy or network device between you and this page.

Downloads are produced in your browser and saved directly by it. They do not pass through us.

Two small items are stored in your browser local storage: your theme choice, and your cookie decision. Neither is a cookie, neither is sent anywhere, and neither contains anything that identifies you.

If you agree to analytics, Google sets two cookies on this site. The cookie policy lists all four items, what each is for, and how long each lasts.

If, and only if, you choose Accept in the cookie banner, this site loads Google Analytics 4. Until you make that choice, no analytics script is loaded and no request is made to Google at all.

Google Analytics records which pages are viewed and when, along with information your browser provides: device and browser type, screen size, language, the page that referred you, and an approximate location derived from your IP address. It sets a randomly generated identifier so that repeat visits can be counted without knowing who you are.

We have configured it to send nothing beyond page views. Google Signals and advertising personalisation are switched off. No tool input, no tool output, and nothing derived from either is ever included in an event. Page addresses are recorded without their query string or fragment, so that even a future feature putting content in a web address could not leak it into a measurement.

Analytics does not run at all on the Secret Scanner or on its two guide pages, whatever your cookie choice. Those pages are where people paste live credentials, and we would rather carry no measurement there than qualify that promise.

You can withdraw consent at any time using the Cookie preferences control in the footer of every page. Measurement stops immediately, the Analytics script is removed, and the cookies it set are deleted. You do not need to reload the page.

This site carries no advertising today. No advertising script is loaded on any page, and no advertising request is made. The Advertising option in the cookie banner currently controls nothing; it exists so that the choice is in place before any advertising is introduced.

We do publish an ads.txt file naming a Google advertising account. That file is a forward declaration required by the advertising industry before a site can be considered, not evidence that advertising is running.

If advertising is introduced, this policy will be updated first, the policy version will change, and you will be asked for your choice again. Advertising will never be enabled on the Secret Scanner.

The site is hosted by Vercel. Every page is generated in advance, so no code we wrote receives what you type. Vercel does, however, handle the request for the page itself, and its infrastructure records ordinary technical information in the process: your IP address, the address you requested, and your browser user agent.

This is standard server logging, it happens for every website you visit, and it is necessary to deliver the page to you. It is separate from analytics and is not affected by your cookie choice. We rely on our legitimate interest in operating and securing the site as the basis for it.

Analytics relies on your consent, under Article 6(1)(a) of the UK GDPR and regulation 6 of the Privacy and Electronic Communications Regulations. You give it by choosing Accept, and you can withdraw it at any time without penalty.

Your theme choice and your cookie decision are stored under the strictly necessary exemption in those same regulations. A record of your cookie decision is expressly permitted, and a theme preference is stored only because you asked for it by using the control.

Hosting logs rely on our legitimate interest in delivering, operating and securing the site.

Your cookie decision is kept for 12 months. After that the banner returns, showing your previous answers, and asks again. It also returns early if we change the services we use, because a decision made about one set of services does not carry over to another.

Analytics data is retained by Google for [GA DATA RETENTION PERIOD], after which it is deleted automatically.

Your theme choice stays in your browser until you clear site data. We never see it.

There are two transfers to be aware of, and we would rather state both plainly than mention only the convenient one.

The first is Google. It processes Analytics data on servers outside the United Kingdom, including in the United States. Those transfers are covered by Google data processing terms, which incorporate the International Data Transfer Addendum to the European Commission standard contractual clauses.

The second is us. We are based in Pakistan, which is not covered by a UK or EU adequacy decision, and we read the aggregated Analytics reports from there. So if you accept analytics, information about your visit is accessible from a country without an adequacy finding.

If you would rather neither transfer happened, decline analytics. Nothing is sent to Google, and nothing about your visit becomes available to us.

Under the UK GDPR you have the right to ask for a copy of your personal information, to have it corrected or erased, to restrict or object to how it is used, to receive it in a portable form, and to withdraw consent at any time.

There is an honest limitation worth stating. We hold no account, no email address and no name for you. The analytics identifier is random, is stored only on your own device, and means nothing to us in isolation. In most cases we would have no way to find your data or to confirm it was yours, and the law does not require us to collect extra information simply to make you identifiable.

In practice, the fastest way to exercise most of these rights is to open Cookie preferences and turn Analytics off, which stops the collection and deletes the cookies, or to clear site data in your browser, which removes everything this site has stored. If you would like us to try to act on a request, write to sajidisrar86@gmail.com and we will respond within one month.

If you think we have handled your information badly, please tell us first at sajidisrar86@gmail.com so we have the chance to put it right.

You also have the right to complain to a data protection regulator. In the United Kingdom that is the Information Commissioner, at ico.org.uk or on 0303 123 1113. In the European Union it is the supervisory authority for the country you live in. Complaining to us first is not a precondition.

This site is a set of developer utilities and is not directed at children. We do not knowingly collect information from anyone under 13.

If we change how information is handled, we will update this page and change the date shown at the top. A change that affects what you consented to will also increase the cookie policy version, which brings the banner back and asks you again rather than assuming your previous answer still applies.