Privacy Policy

The short version

• We do not require or offer accounts, so we hold no name, email or password for you.
• We do not store the content you paste, upload or generate.
• We do not sell, rent or share personal data with advertisers or data brokers.
• We do not build cross-site behavioural profiles or run advertising trackers.
• We do keep short-lived server logs, which is unavoidable for running and defending a public website.

Everything below is the detail behind those five lines. If anything here contradicts what a tool page tells you, treat this page as the authority and please report the discrepancy.

Tools that send nothing

Formatters, encoders and decoders, hash and password utilities, PDF tools, token calculators and generators run entirely as JavaScript in your own browser. The text you paste and the files you drop are processed on your device and never transmitted to us or to anyone else.

You do not have to take our word for this. Open your browser's developer tools, switch to the Network tab, and use the tool — you will see no request carrying your content. Disconnecting from the internet after the page loads is an even blunter test: the tool keeps working.

Tools that use a server

Some checks are impossible in a browser. A page cannot open a TLS socket to another host, cannot read another origin's response headers, and cannot perform a DNS lookup. For those tools we act as the intermediary.

What is sent

The hostname, domain, IP address or URL you entered, plus the request our server makes to it on your behalf.

What comes back

The target's response — certificate details, headers, DNS records, HTML — which we parse and return to you.

What we keep

The result is returned and discarded. We do not build a database of audited sites, and we do not associate a lookup with you.

Affected tools

SSL, TLS, CSP, CORS, cookie and security-header checkers; DNS, ping, traceroute and speed tests; IP geolocation, reputation, blacklist and ASN lookups; website inspector, sitemap checker, redirect chain checker and SEO checker.

One consequence worth stating plainly: the site you check will see a request from our server, and may log it. If you audit a competitor, that request appears in their logs as coming from us, not from you.

Server logs

Like every public web server, ours records requests. A log line contains your IP address, the time, the path requested, the HTTP status, your browser's user-agent string, and the referring page if your browser sent one.

These logs exist for three reasons and are used for nothing else: diagnosing errors, enforcing rate limits so one client cannot degrade the site for everyone, and investigating abuse. They are not joined to any profile, not used for advertising, and not shared other than as described under third parties.

IP address is treated as personal data under the GDPR and comparable laws. Where such a law applies to you, our lawful basis for this processing is legitimate interest in keeping a free service running and secure.

Cookies and browser storage

There are no advertising or analytics cookies on this site. What exists is functional and stays on your device:

Theme preference

Local storage, so the site stays in light or dark mode between visits.

Layout preferences

Local storage, remembering panel widths and editor heights on tool pages you have adjusted.

Anti-forgery token

A session cookie issued only on pages with a form that posts to us. It protects against cross-site request forgery and expires when you close the browser.

Administration

A private authentication cookie used only by the site's own administrators when signed in. Ordinary visitors never receive it.

None of these identify you. Clearing your browser's site data removes all of them, and the only effect is that the site forgets your theme and layout choices.

Third parties

A small number of tools rely on external data that cannot be produced locally — IP geolocation, IP reputation and blacklist status, and ASN ownership. For these, the IP address or domain you asked about is sent to the upstream provider. Your own IP address is not forwarded, and no identifier for you is attached to the query.

We also use standard hosting and content-delivery infrastructure. These providers process request data strictly to deliver the service, as our processors.

We may disclose information where we are legally required to, or where it is necessary to establish or defend a legal claim, or to protect the safety of users. Given how little we hold, there is rarely anything meaningful to disclose.

Retention

• Tool input and output — not retained at all.
• Server logs — kept only as long as needed for diagnostics and abuse handling, then rotated and deleted.
• Emails you send us — kept while the conversation is open and for a reasonable period afterwards, so we can recognise a repeat issue.

Your rights

Depending on where you live, you may have the right to access, correct, delete, port or restrict the processing of your personal data, to object to processing based on legitimate interest, and to complain to your data protection authority.

To exercise any of these, write to [email protected]. Please set expectations accordingly: because we hold no account and no tool history, in almost every case the only data connected to you is a short-lived log line, and we may be unable to locate it from an email address alone. We will not create additional identifying data purely to be able to search for you.

Children

This site is aimed at software developers and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has sent us personal data, contact us and we will delete it.

Changes to this policy

If this policy changes materially — in particular if advertising, analytics or any form of tracking is ever introduced — the effective date above will change and the change will be described here before it takes effect, not after.