Privacy Policy

CodeToolkit.net is designed to function without collecting personal data. Specifically:

• No accounts required. There is no sign-up, login, or user profile system.
• No input data is transmitted. All tool processing (JSON formatting, regex matching, hashing, encoding, diffing) runs entirely via JavaScript in your browser. No input is sent to any server.
• No form submissions are stored. If you contact us via email, we retain only the conversation needed to address your inquiry.

CodeToolkit.net uses only essential cookies required for the site to function correctly. These include:

• Preferences. Theme selection and tool settings may be stored in your browser's localStorage (not transmitted as cookies).
• Analytics cookies. If analytics are enabled, a privacy-respecting analytics service may place a first-party cookie to distinguish unique visitors. No personal information is stored in this cookie.

We do not use advertising cookies, retargeting pixels, or cross-site tracking of any kind.

We use privacy-respecting analytics (Plausible Analytics) to understand aggregate traffic patterns such as page views, referral sources, and device types. Plausible:

• Does not use cookies for tracking
• Does not collect personal data or IP addresses
• Does not track users across sites or devices
• Is compliant with GDPR, CCPA, and PECR without requiring a cookie consent banner

The site may load resources from the following third-party services:

• Vercel. Hosting provider. Vercel may log standard access data (IP address, timestamp, requested URL) as part of infrastructure operations. See Vercel's Privacy Policy.
• Cloudflare. CDN and DNS provider. Cloudflare may process request metadata for performance and security. See Cloudflare's Privacy Policy.
• Google Fonts / Vercel Fonts. Font files may be loaded from external sources on first visit and are then cached locally.

Because all tool processing occurs client-side, the primary security boundary is your own browser. We take the following measures on our end:

• HTTPS enforced on all pages with HSTS preloading
• Content Security Policy headers to prevent XSS and injection attacks
• No server-side storage of user input data
• Regular dependency audits and updates

Because we collect minimal data, most data-subject rights are satisfied by default:

• Right to access. We do not hold personal data to disclose.
• Right to deletion. No personal data is stored that requires deletion.
• Right to opt out of sale. We do not sell personal data to any party.
• Do Not Track. Our analytics solution respects DNT signals by design.

If you have questions about your data, contact us at [email protected].