Privacy
JSON Toolkit is built so that the data you work with never leaves your browser. This page explains exactly what that means, what the site does load from the network, and how advertising works.
Your data stays in your browser
Everything you enter or create in the tools is processed on your own device, by code running in your browser. That includes:
- JSON, CSV, YAML and XML you paste or type
- Files you open with “Open file…”, which are read locally and never uploaded
- JSONPath expressions and JSON Schemas
- Formatted output, conversions, validation results and generated MongoDB and SQL queries
None of this is sent to our servers, to the ad provider or to anyone else. It is not saved in cookies or browser storage either: when you close or reload the page, it is gone. The only thing the address bar records is which tool page you are on.
What is loaded from the network
Your browser downloads the site itself (its pages, code and styles) from our hosting provider, like any website. Some tools download extra code the first time you use them, such as the JSON Schema, YAML and XML libraries. These come from this site too, and they only receive code, never your data.
The JSON Schema validator never downloads remote $ref URLs, and the XML converter never reads external entities, so pasted content cannot make your browser fetch other addresses.
Advertising
The site does not show ads at the moment. If a small, clearly labelled ad is added below the tools in the future, it will be loaded from an advertising network, so your browser will make requests to that network. The ad network will never receive anything you enter in the tools, and this page will be updated to name the network.
Analytics
The site does not use analytics or tracking scripts.