Privacy Policy

Last updated:

This policy explains what data JSONYard ("we", "this site") collects when you visit it, how we use that data, and your rights regarding it. We've tried to keep it short and honest.

1. What we collect

Your JSON / CSV / XML / YAML input

Nothing. Every tool on this site processes your input entirely in your browser using JavaScript. The data you paste never leaves your device. You can confirm this yourself: open your browser's developer tools, switch to the Network tab, and watch for outbound requests as you use the tools. There aren't any.

Your preferences

We use your browser's localStorage to remember your theme (light/dark), indentation preference, and split-pane ratio. This data stays on your device — nothing is sent to us. You can clear it via your browser's site settings.

Server access logs

Our hosting provider (Cloudflare Pages) records standard request metadata — IP address, user agent, request time, request URL, response status — for security and reliability. These logs are retained per Cloudflare's standard retention period and are not used for advertising. We do not have access to them per-user; we see only aggregate statistics.

2. Cookies

We do not set any first-party tracking cookies. The only persisted client-side state is localStorage (preferences). Third-party services described below may set their own cookies — see section 4.

3. Analytics

We use Umami — a privacy-respecting, cookieless analytics service — to count page views and aggregate browsing patterns. Umami does not set cookies, does not use cross-site identifiers, and does not collect personal data. The events Umami records (page visited, country, referrer, browser type, screen size) are aggregated and cannot be used to identify you individually. The analytics script loads from cloud.umami.is and sends events to the same domain. Because Umami does not use cookies or personal identifiers, it does not require a consent banner under the GDPR or CCPA. We do not analyze the JSON you paste — only your navigation between pages is counted.

4. Advertising and the consent banner

This site may display advertisements provided by Google AdSense and/or other ad networks to support the cost of running the site. When ads are enabled:

  • Ad networks may set cookies and use device identifiers to show personalized or non-personalized ads.
  • If you are in the EEA, UK, Switzerland, or California, you will see a consent banner before any advertising scripts load. You can choose to see non-personalized ads instead.
  • Google's use of advertising cookies is described at policies.google.com/technologies/ads. You can manage personalized ads at myadcenter.google.com.
  • We do not provide your JSON content to ad networks. Targeting is contextual (based on the page topic) plus whatever data the ad network independently collects (such as your IP and referring page).

The consent mechanism

The consent banner is implemented with Google Funding Choices — a Google-certified Consent Management Platform (CMP) that supports the IAB Transparency & Consent Framework (TCF v2.2) and Google Consent Mode v2. Before you make a choice, all advertising signals (ad_storage, ad_user_data, ad_personalization, analytics_storage) default to denied, and no advertising or analytics scripts execute. Your choice is stored as a standard TCF consent string on your device; you can revisit it at any time by clicking the "Manage privacy choices" link that Funding Choices injects into the page (typically near the page footer).

If you are outside the regions that require a consent prompt, the banner does not appear and non-personalized contextual ads may be served without prompting, in accordance with the AdSense Program Policies.

5. Children

JSONYard is a developer tool. It is not directed to children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children.

6. Your rights

If you are in the EEA, UK, or California, you have rights under GDPR / CCPA — including access, deletion, and the right to object to processing. Because we don't store any personal data about you, most of these rights are satisfied automatically (we have nothing to give you). For matters involving cookies set by ad networks, those rights are exercised against the relevant network — see the links in section 4.

7. Data retention

We do not retain your input data — it is never sent to us. Server logs are retained by our hosting provider per their schedule.

8. Third-party services

The site is hosted on Cloudflare Pages and served through Cloudflare's CDN. Cloudflare's privacy notice is at cloudflare.com/privacypolicy.

If/when advertising is enabled, the additional third party is Google (and potentially other ad networks). Their policies are linked above.

9. Changes to this policy

We will update the "Last updated" date when this policy changes. Material changes will be noted on the homepage for a reasonable period.

10. Contact

Questions about this policy: see Contact.