Privacy policy

Last updated 27 September 2026.

The short version

What you type or paste into a tool stays in your browser. It is not sent to us, logged or stored. There are no accounts and no tracking cookies.

Tool input

Every tool runs as JavaScript in your browser. Your input is processed on your own device and is never sent, by any tool. To check, open your browser's network inspector and use a tool: no request carries your input.

Because nothing is sent, we have nothing to keep, share or lose in a breach.

Share links

Some tools have a Share button. It puts your input in the part of the link after the #. Browsers never send that part to a server, so we never receive it, even when someone opens the link.

The input is still in the link. Anyone you send it to can read it, and it is saved in your browser history. Tools whose input is likely to be a secret, such as the hash, HMAC, bcrypt, JWT and password tools, have no Share button.

What is stored on your device

This site writes at most five values to localStorage. Only your own browser can read them:

  • lardr:theme: whether you chose the light or dark theme.
  • lardr:consent: your advertising choice, once advertising exists.
  • lardr:recent: the names of the last few tools you opened, so the home page can offer them again. Only which tools, never anything you typed into them. The home page has a button to clear it.
  • lardr:pinned: the names of tools you pinned, so the home page shows them first. Only which tools; unpin one to remove it.
  • lardr:prefs: the direction and options you last chose on each tool, such as Decode or URL-safe, so the tool opens the same way next time. Only tool names and settings, never anything you typed.

Clearing your browser data removes all of them. None of them identifies you.

When a page suggests another tool for what you pasted and you follow the suggestion, your input is carried across insessionStorage under lardr:handoff. It never goes into the address bar or your history. The next tool page you open deletes it straight away, it is ignored after a minute, and your browser discards it when you close the tab.

So that tools keep working without a connection, your browser keeps a copy of the pages and code files you have opened, in its own cache (Cache Storage, managed by a service worker). That copy holds the site itself, never anything you typed or pasted into it, and clearing your browser data removes it.

Analytics

There is no analytics script on this site. No page you visit loads a tracker, sets a cookie for measurement, or reports anything about you to us or to anyone else.

We do count which tools get used. The first time a tool produces a result on a page, the page requests an empty file named after the tool (for example /e/base64.txt), and our host counts those requests in aggregate. The request carries the tool's name and nothing else, never your input, and no identifier or cookie. It tells us a tool was used some number of times, not by whom or on what.

Our host also counts the requests it serves, in total, as every host does. That tells us how often a page was fetched. It is not tied to a person, a session or a visit history, and we do not join it to anything else.

Hosting

The site is hosted on Cloudflare Pages. As with any web host, Cloudflare processes the requests needed to deliver pages to you and keeps short-lived operational logs for security and abuse prevention. This is standard infrastructure logging, outside our control, and is covered by Cloudflare's own privacy policy.

Advertising

There is currently no advertising on this site. If that changes, this policy will be updated before any ad is served, and this section will name the network, say what it collects, and explain how to change your choice.

Every page does load two empty files, /ads/banner.js and/misc/util.js. Neither contains any code: they exist so we can compare how often each is requested and estimate what share of visitors use a content blocker, which is how we will decide whether advertising is worth doing at all. Nothing is recorded about you individually: the comparison is between two totals, and a blocked file is a request that never arrives. You are welcome to block them.

Should we use a network that sets cookies or uses data for personalised advertising, you will be asked for consent first, no ad script will load until you answer, and a link in the footer will let you change your answer at any time.

Your rights

Under the GDPR, UK GDPR, and laws such as the CCPA/CPRA you have rights to access, correct, delete and port your personal data, and to object to its processing.

We hold no personal data about you, so there is generally nothing to access or delete. We do not sell or share personal information, and never have. If you want to exercise a right or ask what we hold, contact us and we will respond.

Children

This site is intended for a general audience and is not directed at children under 13. We do not knowingly collect personal information from anyone, children included.

Changes

If this policy changes materially, the date at the top will be updated. A change to how your data is handled will be described on this page in plain words.

Contact

Questions about privacy on this site can be sent to privacy@lardr.dev.