Privacy Policy

Every tool on devutils.sh is designed with privacy as the foundational principle. Here's how it works:

1. You load a tool page - Your browser downloads static HTML, CSS, and JavaScript files from our CDN (Cloudflare Pages).
2. You input your data - Whether it's a JWT token, SSL certificate, JSON data, or any other input - it stays in your browser.
3. Processing happens locally - JavaScript code running in your browser processes your data. No network requests are made to any server.
4. Results are displayed - The processed output is shown directly in your browser.
5. Nothing is saved or transmitted - When you close the page or refresh, everything is gone. We never see your data.

You can verify this yourself by opening your browser's Developer Tools (Network tab) and watching that no network requests are made when you use our tools. The only requests you'll see are for loading the initial page resources (HTML, CSS, JS).

To be crystal clear, here's what we do NOT collect, store, or have access to:

• Any data you input into our tools (tokens, certificates, text, files, etc.)
• Your IP address
• Browser information or user agent
• Geographic location
• Cookies (except essential ones for site functionality)
• Page views or usage analytics
• Click tracking or heatmaps
• Search queries
• Email addresses or personal information
• Device fingerprints

We don't use Google Analytics, Facebook Pixel, or any other third-party tracking service. Period.

Our privacy-first approach is enforced by our technical architecture:

• Static Site Generation: Built with Astro, the entire site is pre-rendered to static HTML at build time. There's no backend server processing requests or handling data.
• Client-Side Processing: All tool logic uses JavaScript libraries that run in your browser (crypto-js, jsrsasign, jose, etc.). These libraries never make external requests.
• CDN Hosting: The site is hosted on Cloudflare Pages, which serves static files. Cloudflare may collect basic access logs (IP addresses, timestamps) for infrastructure purposes, but we don't have access to these logs and don't use them for tracking.
• No Backend APIs: There are no API endpoints that accept or process your data. The architecture makes it impossible for us to collect your tool inputs.

We use minimal cookies, and only for essential functionality:

• Essential Cookies: We may use strictly necessary cookies for basic site functionality (e.g., remembering your theme preference if we add dark/light mode toggle). These cookies are essential for the site to work properly.
• No Tracking Cookies: We do not use any cookies for analytics, advertising, or tracking purposes.

Currently, we don't set any cookies at all. If we add essential cookies in the future, this policy will be updated.

We use the following third-party services for hosting and infrastructure:

• Cloudflare Pages: Hosts our static site and serves content via their global CDN. Cloudflare may collect standard access logs (IP addresses, timestamps) for infrastructure and security purposes. Review their privacy policy.

We do not embed any third-party scripts, widgets, or services that could access or track your data. No external JavaScript libraries are loaded from CDNs at runtime - all code is bundled with the site.

Since we don't collect any personal data, traditional data protection rights (access, deletion, portability) don't apply - there's simply no data to access, delete, or export.

However, you have the right to:

• Verify our privacy claims by inspecting network traffic in your browser's Developer Tools
• Use the tools completely anonymously without any account or identification
• Block all cookies if desired (the site will still work)
• Use the tools offline (once a page loads, it works without internet)

The best security is not collecting data in the first place. Since all processing happens client-side:

• Your data never transits over the network to our servers
• We can't be hacked or breached because we don't store your data
• There are no databases, logs, or backups containing your information
• Your data security depends entirely on your browser and device security

We serve the site over HTTPS to ensure the integrity of the code you download, but once loaded, the tools work entirely offline in your browser.

Our services are intended for developers and technical professionals. We don't knowingly collect personal information from anyone, including children under 13. Since we don't collect any data at all, this isn't a concern.

We may update this privacy policy from time to time to reflect changes in our practices or for legal reasons. Any changes will be posted on this page with an updated "Last updated" date.

However, our core commitment will never change: we will never collect, store, or transmit your tool data. If we ever move away from 100% client-side processing, we will clearly announce it and give you the option to continue using client-side versions of the tools.

If you have questions about this privacy policy or our privacy practices, please contact us via:

bijayabudhathoki.com