Privacy

Most DevToolbox tools process what you paste or upload entirely in your browser. Local tools do not send input to our server. Tool inputs and outputs are not stored in localStorage, placed in URLs, sent to analytics, or intentionally placed in the offline cache.

Analytics choice

Analytics is limited to counts for page views, tool opens, and generic actions. It excludes input, output, filenames, hostnames, tokens, hashes, decoded data, logs, manifests, and environment variables. Do Not Track disables analytics where supported, and no fingerprinting is used.

Offline caching

The service worker caches the application shell, previously visited pages, and static code or image assets so browser-only tools can work after the first load. It does not cache API responses, including certificate checks or hostnames submitted to them.

Clearing cached files

You can remove DevToolbox site data from your browser settings or uninstall the app. Updating the app replaces older versioned caches.

Server-assisted tools

Tools marked server-assisted send only the explicitly submitted value needed for that request. Certificate checks use a restricted endpoint with network-abuse protections and do not write submitted hostnames to application logs.

Error safety

Application error summaries are automatically redacted for common keys, tokens, credentials, email addresses, and IP addresses. DevToolbox does not intentionally log secrets, manifests, logs, environment variables, or decoded data.