Privacy and analytics
The JSON and JWT tools process the text you paste in your browser. Payload Haven does not upload or save that input. Treat real tokens as sensitive, and avoid sharing them with others.
Site usage counts
We count page views and tool attempts and successful processing as daily totals. Only fixed event names, page paths, and short campaign labels are sent. No pasted text, tokens, results, or input lengths are sent. Declining analytics, excluding your visits, or enabling supported browser privacy signals stops these counts.
Optional anonymous visitor measurement
If you allow analytics, we also store random browser and session IDs to estimate distinct browsers and returning visits. The browser ID resets after 30 days; a session expires after 30 minutes of inactivity. We record the external referring domain only, never its full address or query string. Internal navigation retains the session’s original source. Missing referral information appears as direct/unknown.
Detailed records are kept for up to 30 days, with expired records removed as new consented activity arrives. We do not store IP addresses or user agents in the analytics database. Obvious automated clients are filtered, but bots can imitate people; these are estimates of browser activity, not verified people. Hosting providers may retain operational request logs separately.
Optional Google Analytics
If you choose “Allow analytics,” Google Analytics records page visits and fixed names for clicks on Format, Minify, Compare, and Inspect. We do not send pasted text, token contents, results, or input lengths in these events. The tag receives page paths without query strings and may use a browser cookie to distinguish visits. Enhanced measurement and advertising signals are disabled for this site.
Google Analytics may also receive standard browser and device information. See Google’s privacy policy. If you decline, the Analytics tag is not loaded. Your choice is saved in this browser.
Change your choice
Exclude this browser
Use this on each browser or device you use to test the site. Exclusion stops both site counters and Google Analytics on future visits.