Privacy Policy

_Last updated: 2026-05-14_

tool127 is a collection of developer utilities that runs entirely in your browser. Your sensitive data (like JSON payloads or tokens) never leaves your device. We use industry-standard advertising to keep this service free.

Summary

• We do not transmit the content you paste or generate (JSON, JWTs, colors, UUIDs, etc.) to any server.
• Your tool data is processed locally on your device using localStorage, sessionStorage, and IndexedDB.
• We use Google AdSense to serve ads, which uses cookies to personalize your experience.
• We do not require an account, and we do not collect your personal tool data.

Who is responsible (data controllers)

There are two separate data relationships on this site, and it's important to understand the distinction:

• tool127 (us) — we do not collect, store, or transmit any personally identifiable information. The only data we "process" is the data your own browser stores locally, which we cannot access remotely.
• Google AdSense (third party, independent controller) — Google operates as an independent data controller for the cookies and identifiers it uses to serve ads. Google's data practices are governed by Google's Privacy & Terms and the How Google uses information from sites or apps that use our services page. We have no access to, and no control over, the data Google collects through AdSense.

If you reject non-essential cookies in our banner, Google's advertising identifiers should not be set. If you accept, Google's terms apply to that data.

Advertising (Google AdSense)

We use Google AdSense to serve advertisements. To keep tool127 free, we show non-intrusive ads.

• Cookies: Google uses cookies to serve ads based on your prior visits to this or other websites. Details: How Google uses cookies in advertising.
• Personalization: Google's use of advertising cookies enables it and its partners to serve ads based on your visit to this site and/or other sites on the Internet.
• Opt-out: You can opt out of personalized advertising by visiting Google Ads Settings. You can also reject non-essential cookies via the privacy banner upon your first visit, which will prevent personalized ad cookies from being set.
• Third Parties: You can also opt out of some third-party vendors' use of cookies for personalized advertising by visiting www.aboutads.info.
• Full disclosure: Google's complete advertising and privacy practices are described at Google's Privacy & Terms.

USA / California (CCPA) Privacy Rights

Under the California Consumer Privacy Act (CCPA) and similar state laws, you have the right to opt-out of the "sale" or "sharing" of your personal information. We do not sell your personal data. However, the use of third-party advertising cookies may be considered "sharing" for cross-context behavioral advertising. You can exercise your right to opt-out of this sharing by clicking the "Reject non-essential" button on our cookie consent banner. We also honor global opt-out mechanisms where required by law.

What stays on your device

The following information is persisted in your browser only and never leaves it:

• Settings — theme, accent color, language preference, editor options.
• Tool history — recent inputs and outputs from tools like the JSON Formatter (stored in IndexedDB).
• Masking rules — any global redaction rules you save for sensitive payloads.

You can clear all of this at any time by clearing your browser's site data for this domain.

Cookies & similar technologies

We use essential local storage to remember your settings and history. We also use third-party cookies from Google AdSense for advertising purposes as described above. By using this site, you consent to the use of these cookies.

What we do not collect

We do not collect or process:

• Names, email addresses, phone numbers, or any other identifying information.
• The text or files you paste into any tool.
• Your tool payloads are never shared with advertisers.

Bug reports

If you choose to submit a bug report through the in-app form, we send only:

• The text you write in the report.
• Diagnostic metadata (browser, OS, app version, route).

We do not include the JSON or other payloads you've been working on. The submission is voluntary; you can use the public GitHub repository instead if you prefer.

Third parties

The site is delivered from a CDN that may log standard request metadata (IP, user agent, timestamp) for security and operational reasons. Beyond that, we do not embed third-party scripts that profile you.

Your rights (GDPR, UK GDPR, CCPA/CPRA)

Although tool127 itself does not collect personal data, you still have legally protected rights — both against us (to confirm we hold nothing about you) and, separately, against Google for the data it processes via AdSense. Under the EU/UK GDPR (Articles 15–22) and similar laws you have the right to:

• Access (Art. 15) — request confirmation of whether we hold personal data about you, and a copy of it. _We hold none._
• Rectification (Art. 16) — request correction of inaccurate data. _Not applicable; we hold none._
• Erasure / "right to be forgotten" (Art. 17) — request deletion. To remove the only data that exists (the local browser storage on your device), clear your browser's site data for this domain.
• Restriction of processing (Art. 18) — request that we limit processing.
• Data portability (Art. 20) — receive your data in a structured, machine-readable format.
• Objection (Art. 21) — object to processing, including for direct marketing / personalized advertising.
• No automated decision-making (Art. 22) — we do not perform any automated decision-making or profiling that produces legal effects on you.
• CCPA/CPRA "Do Not Sell or Share" — exercised by clicking "Reject non-essential" in our consent banner, or via the "Manage cookies" link in the footer.
• Right to lodge a complaint with your local supervisory authority (e.g. your national Data Protection Authority for EU residents, the ICO for UK residents, the California Privacy Protection Agency for California residents).

For rights against Google (the controller for AdSense data), please use Google's privacy tooling: myaccount.google.com and Google's privacy help center.

Contact

For privacy-related questions, GDPR/CCPA requests, or any concerns about this policy, email <george.postoronca@gmail.com>. We aim to respond within 30 days, as required by the GDPR.

You may also:

• Open an issue at github.com/tool127/issues (public).
• Use the in-app Report Issue link in the footer.