Privacy Policy

Summary

Every tool on this site — the secret generator, decoder, encoder, and validator — runs entirely inside your browser using the Web Crypto API. Secrets, tokens, payloads, and keys you type or generate are never transmitted to, logged by, or stored on our servers.

Data we do not collect

• Generated secrets, JWTs, payloads, signing keys, or JWKs.
• Account data — the site has no sign-up or login.
• Uploaded files. No upload feature exists.

Data that may be collected

• Standard server logs. Our hosting provider may record request metadata such as IP address, user agent, and requested URL for security and abuse prevention.
• Advertising. If advertising is enabled, Google AdSense may set cookies and use device identifiers to serve ads. See Google's advertising policies. You can opt out at Google Ads Settings.

MCP / agent endpoint

The agent connection endpoint exposes stateless utilities. Inputs sent to it are processed in-memory to compute a response and are not persisted.

Your choices

You can block cookies and scripts in your browser; the tools continue to work because all computation is local. To remove any locally stored preference, clear this site's data in your browser settings.

Changes

We update this policy when the site's behaviour changes. Material changes are reflected on this page.

Contact

Questions about this policy? See the contact page.