Privacy Policy

Last updated: 14 August 2026

The short version

The data you paste into a tool is converted in your own browser and is not uploaded. There are two deliberate exceptions: the share feature, which stores a document on a server so the person you send the link to can open it, and the four repair tools (JSON Fixer, XML Fixer, YAML Fixer, CSV Fixer), which send the document to a server to be fixed because that needs more than a browser parser can do. Both are described in full below.

There's no charge to use anything on this site — it's paid for by advertising, so Google and two analytics providers do set cookies here. That part is spelled out in full below rather than glossed over.

What happens to the data you paste

Most tools here — the converters, formatters, validators and viewers — run entirely as JavaScript inside your own browser, using the parsers the browser already ships with (JSON.parse, DOMParser, XMLSerializer). That covers well over a hundred of the tools on this site. The two exceptions — sharing a link and the four repair tools — are each covered in their own section below, so nothing about how they work is left for you to discover later.

For every other tool, your JSON, XML, YAML or CSV is not sent over the network when you convert it. It is held in your browser's memory while the page is open and discarded when you close or reload the tab. It is not written to a database, not saved to disk on any server, and not logged.

You do not have to take that on trust. Load any tool page other than the four repair tools, disconnect from the internet, and it will keep working. Or open your browser's developer tools, switch to the Network tab, and watch that pasting data produces no requests.

Several tools have a Share button. This is the one place where your content does leave your browser, and it only happens when you click it — never as part of simply pasting into a tool.

When you create a share link, the document currently in the editor is sent to our server and stored under a random identifier. That identifier is what the link contains, so anyone who has the link can open the document. There is no password on it. Before you share, ask yourself whether the content is something you would be comfortable with a stranger reading, and strip out real customer identifiers, credentials and personal data first.

You choose how long it is kept at the point of creating the link — 1, 3, 6, 12 or 24 months, with 1 month as the default. After that period the stored document expires. If you want a link removed sooner than that, email us and we will delete it.

Repairing a broken file

Four tools go further than parsing: JSON Fixer, XML Fixer, YAML Fixer and CSV Fixer. A parser can tell you a document is invalid; it cannot decide what a missing comma or an unclosed tag was supposed to say, and producing that repair takes more than what runs in your browser.

Click Fix on one of those four pages and the document currently in the editor is sent to our server, repaired, and sent back to you. This happens every time you use the Fix button on those specific pages — it is not tied to the Share button above, and no other tool on this site sends data this way. We do not save the document afterward the way a share link is saved; it is used to produce the one response and then it is gone from our side.

If you would rather nothing you paste ever left your browser, use the matching validator instead: the JSON Validator, XML Validator or YAML Validator reports where a document breaks without sending it anywhere, and CSV Formatter surfaces most structural problems in CSV the same way, entirely client-side.

Information collected automatically

Like any website, this one is served by infrastructure that records ordinary request information: your IP address, the page requested, the time, your browser's user-agent string, and the referring page. This is standard server and CDN logging, used to keep the site running and to investigate abuse or outages. It is not used to build a profile of you.

Analytics

Two third-party services are used to understand how the site is used. Neither receives the content you paste into the tools.

Google Analytics

Collects standard web analytics: pages visited, approximate geographic region, browser and device type, and how you arrived at the site. This is used to see which tools people actually use. Google's handling of that data is covered by Google's Privacy Policy.

Microsoft Clarity

Clarity records how people interact with the interface — clicks, scrolling, mouse movement — and builds heatmaps from it. To be accurate about what that means: Clarity can replay an individual session, so it is session recording, not only aggregate statistics. It is used to find parts of the interface that confuse people. Microsoft's handling is covered by the Microsoft Privacy Statement.

Advertising

There is no charge to use any tool on this site; it is supported by advertising. It uses Google AdSense to display ads.

  • Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website and to other websites.
  • Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the internet.
  • You can opt out of personalised advertising by visiting Google Ads Settings.
  • You can also opt out of a third-party vendor's use of cookies for personalised advertising at aboutads.info/choices or the NAI opt-out page.
  • More detail on how Google uses information from sites that use its services is at Google's partner-sites page, and its advertising technologies are described at policies.google.com/technologies/ads.

Ads are supplied by Google and its partners, not chosen or written here. An ad appearing on this site is not an endorsement of the advertiser.

Cookies

Cookies on this site fall into three groups: analytics cookies set by Google Analytics and Microsoft Clarity, advertising cookies set by Google and its advertising partners, and whatever is strictly needed to serve the pages. There is no account system, so there are no login or authentication cookies.

You can block or delete cookies in your browser settings, and every tool on this site will continue to work normally — because the conversion happens locally, not on a server.

Your choices

  • Opt out of personalised ads through Google Ads Settings, aboutads.info or the NAI opt-out.
  • Opt out of Google Analytics with the Google Analytics opt-out add-on.
  • Block cookies, or use tracking protection or a content blocker, in your browser.
  • Simply do not use the Share button if you would rather nothing was stored at all, or skip the four repair tools if you would rather nothing left your browser in the first place.

What we do not do

  • We do not store the content you paste, with one exception: a document you deliberately share is stored under a link, for the retention period you choose.
  • The four repair tools send your document to a server to be fixed, but that document is not saved afterward — it is not the same thing as sharing it.
  • We do not sell your personal data.
  • We do not require an account, an email address, or any sign-up.
  • We do not read the documents behind share links, except where we have to in order to investigate abuse or respond to a legal obligation.
  • We do not attempt to identify you personally from analytics data.

How long things are kept

  • Documents you paste into a tool other than the four repair tools — never leave your browser, so nothing to keep.
  • Documents sent to a repair tool — used to produce the fixed version and then discarded; not saved on our side.
  • Shared documents — for the period you selected: 1, 3, 6, 12 or 24 months, then they expire.
  • Analytics data — held by Google and Microsoft under their own retention schedules, linked above.
  • Server request logs — kept only as long as they are useful for security and reliability, then rotated out.

The tools and guides link out to sites such as MDN, the relevant RFCs and Stack Overflow, and ads link to third parties. Once you follow one of those links, that site's own privacy policy applies — we have no control over how they handle your data.

Children

These are general-purpose developer utilities, not directed at children, and they knowingly collect no personal information from anyone, including children under 13.

Your rights

Depending on where you live, you may have the right to ask what personal data is held about you, to have it corrected or deleted, to object to how it is processed, or to receive a copy of it. To exercise any of these, email [email protected].

In practice there is very little to act on: no account exists, and pasted data is never stored. The exceptions are a document you chose to share — tell us the link and we will delete it — and the analytics and advertising data held by Google and Microsoft, which you can control through the opt-outs listed under Your choices.

Changes to this policy

If this policy changes, the date at the top of the page is updated. Any change affecting how your pasted data is handled would be stated prominently rather than buried here — keeping conversions local to your browser, with the two documented exceptions above, is the point of the site, not a detail we intend to revisit.

Contact

Questions about this policy, requests to delete a shared document, or anything else about how the site works can go to [email protected], or through the contact page.