Privacy Policy

Every tool on PayloadTools — JSON Formatter, XML Compare, SQL Formatter, JWT Decoder, and the rest — runs as client-side JavaScript inside your browser. When you paste, type, or upload a file into a tool, that content is read, processed, and rendered entirely on your device using your browser's own JavaScript engine.

We do not have a server that receives, logs, stores, or has any visibility into that content. It is never uploaded, never transmitted over the network, and never seen by us — including file uploads, which are read directly from disk into the browser and never leave it. This applies to every tool on the site, without exception.

Outside of the tools themselves, there are exactly two ways information reaches us:

Contact form submissions. If you use the Contact Us page, the name, email address, subject, and message you enter are sent directly to our inbox by email. We use that information only to reply to you — it is not added to a mailing list, sold, or shared with anyone else.

Basic usage analytics. We use Google Analytics to understand which tools and pages are actually useful, at an aggregate level — page views, approximate location (city/country level), device and browser type, and referring site. This never includes anything you type or paste into a tool, since that data never leaves your browser in the first place.

PayloadTools sets one piece of local storage itself: your light/dark theme preference, saved in your browser's localStorage so the site remembers your choice on your next visit. That value stays on your device — it is never sent to us.

Google Analytics sets its own standard cookies to distinguish sessions and visitors, in line with Google's privacy policy. We do not run any advertising, retargeting, or cross-site tracking scripts.

A short, complete list of services PayloadTools relies on, and what each one sees:

• Google Analytics — aggregate site usage, as described above.
• Gmail / Google Workspace — delivers contact form messages to our inbox by email.
• Our hosting provider — serves the site's static files and pages, and sees standard web server logs (IP address, requested page, timestamp) as any host does.

None of these services receive the content you process inside a tool.

Contact form messages live in our email inbox for as long as a normal email would, until we delete them. We don't maintain a separate database of contact submissions. Analytics data is retained according to Google Analytics' standard retention settings. Content you paste into a tool is never retained anywhere, by anyone, because it's never transmitted off your device to begin with.

You can block Google Analytics entirely with a browser extension or content blocker — the tools themselves will keep working exactly the same, since analytics has nothing to do with how they function. You can also clear your theme preference at any time by clearing your browser's local storage for this site.

If you've sent us a message through the contact form and want it deleted, just contact us and ask — we're happy to remove it.

PayloadTools is a developer tool and is not directed at children. We do not knowingly collect personal information from anyone under 13.

If how PayloadTools handles data ever changes, we'll update this page and change the "Last updated" date at the top. Since there's no account or email on file for most visitors, we won't be able to notify you directly — check back here if you want to know what's changed.

Questions about this policy or how PayloadTools handles data? Reach out through the Contact Us page.