Privacy and tool data

What happens when you use the tools.

Last updated: 2 October 2026.

Local tools

JSON, text, encoding, UUID, and color operations run in your browser. This implementation does not upload that input to a tool server or save it after navigation. Copying a result writes to your device clipboard.

Website scans

When you choose Analyze website, the URL is sent to this site’s PHP backend. The backend resolves its domain, reads robots.txt, requests the public webpage, and may request up to two same-origin WordPress theme stylesheets. The target website sees the hosting server’s request, including the scanner’s user agent and server IP address. Do not submit URLs containing private access tokens or other secrets.

Temporary storage

Reports may be reused for 30 minutes. Cached reports contain detected technology metadata and limited public evidence; URL query strings are omitted from displayed results. Raw webpage bodies are processed in memory and are not saved by this application. Cache files are limited to 256 slots and deleted opportunistically after expiry or overwritten by later entries; the application does not maintain scan history or a user database.

Rate limits use a salted hash of the connection IP address, not the full address, in temporary storage. Per-visitor rate-limit entries expire after 10 minutes and are removed on subsequent requests. Website cooldowns last 30 seconds; aggregate capacity counters last up to an hour. Hosting access logs may separately record connection information under the hosting provider’s retention settings.

External services

Google Fonts supplies the typefaces and receives ordinary web connection information. Links to vendors open their websites, where their own privacy policies apply.

Advertising and cookies

This implementation does not set application cookies or run advertising, analytics, or affiliate-tracking scripts. Before those services are enabled, this policy and any required consent controls must be updated.

Before public launch

The site owner must add the legal operator’s name, privacy contact, applicable rights and complaint process, and the actual hosting-log retention details before publishing this as the final privacy notice.