The 30-second version
Every tool on GadgetFlows runs entirely in your browser. We do not operate a backend that receives your inputs — your JSON, JWTs, passwords and URLs never leave the tab you're on. We do not set cookies, run third-party trackers, or use analytics. You can verify this by opening your browser's DevTools and watching the network panel while you use a tool.
01 Data we handle
The data you put into GadgetFlows tools is processed locally and discarded the moment you close the tab. To be precise about what does and doesn't happen:
What we never see
- The contents of any text you encode, decode, or convert
- JWTs, passwords, and secrets you paste in
- JSON payloads, XML or YAML you transform
- URLs, cron expressions, color values, markdown drafts
- Files you drop into a tool — they're read with the local
FileReaderAPI
What our hosting provider sees
- Your IP address (for routing and abuse prevention) — retained in short-term access logs
- Your
User-Agentstring - The path you requested (e.g.
/json/json-formatter) - The HTTP status code returned
Standard web-server access logs are kept short-term to debug outages and block abusive traffic. They are not combined with anything else and are not used to profile individuals.
02 Where the work happens
When you open a tool, your browser downloads the HTML, CSS, JavaScript and web fonts. After that, all conversion, parsing, generation and rendering runs inside your tab via standard browser APIs:
btoa/atobandTextEncoderfor Base64 and UTF-8 handlingcrypto.getRandomValuesfor password and UUID entropycrypto.subtle(Web Crypto) for HMAC signature verification in the JWT decoderIntl.DateTimeFormatfor timezone-correct date mathDOMParserfor XML parsing
There is no “send to server” step. You can open your browser's Network tab to confirm that no requests are made when you click Encode, Decode, Generate or Verify.
03 Browser storage
A small number of tools use localStorage as a convenience so your work survives a page refresh. This data is stored only in your browser, on your device — we cannot read it from our servers.
- Markdown Preview autosaves your draft under the key
gf-md. - No other tool persists user input.
You can wipe these keys at any time from your browser's storage inspector, or by clicking Clear in the tool itself.
05 Third-party services
We use a single vendor to deliver the site. We do not share user-typed data with anyone, but your browser does make requests to the host when loading the page.
| Vendor | Purpose | What it sees | Region |
|---|---|---|---|
| Vercel | Hosting & CDN | IP, UA, request path | Global edge |
| Web fonts | Spectral, Open Sans, JetBrains Mono — bundled at build time, no external request at runtime | — | Self-hosted |
06 Children
GadgetFlows is a developer-tools site with no signup, no targeted advertising, and no user-generated public content. It is not directed at children under 13, and we do not knowingly collect data from anyone of any age.
07Your rights (GDPR, CCPA & friends)
Because we do not store personal data, most data-subject rights resolve themselves — there is no profile to access, correct or delete. The short-term access logs at our hosting layer contain pseudonymous IP addresses that expire automatically.
If you have a reasonable request that does not map to the above — for example, written confirmation that we do not hold a profile on you — please reach out via gadgetflows.com and we'll respond within 14 days.
08 Changes to this policy
If we ever materially change how GadgetFlows handles data — for instance, adding a feature that requires a server round-trip — we'll update this page and refresh the “last updated” date at the top. Material changes will also be announced on the homepage for at least 30 days before they take effect.
09 Contact us
Questions about this policy, or about how a specific tool works under the hood? Reach out via gadgetflows.com.