In short: we don't ask who you are and we don't save the data you format or convert. Share Drop keeps what you share in memory for a short time so the link works. The site uses Google Analytics to count visits and one cookie to prevent abuse.
Data you paste into the tools
Handled in your browser
Formatting, minifying, validation, the tree view and code folding run entirely in your browser. For these, your data is not sent to our server.
Handled on our server
Repair, Sort and all Convert buttons (to XML, JSON, YAML, TOML, CSV and SQL), as well as the Object Mapper, send the content of the editor to our server. The server processes it in memory, sends the result back and does not write your data to a database, a file or our logs.
Share Drop
When you create a share link, the text or file is kept in the server's memory so that the link or key works. It is removed automatically after a short time. If you choose a one-time link, it is removed as soon as it has been opened once. Anyone who has the link or key can open the content while it exists, so don't share secrets this way.
If you enter a recipient email address, we pass that address and the link to our email provider, Brevo, which sends the message. The recipient address and the share key are recorded in our server logs so we can investigate delivery problems. When the email can't be sent this way, your own mail app opens instead.
Cookies and browser storage
- CLIENT_ID cookie. A random identifier that lets us limit how many requests one visitor can make per minute, which keeps the service available for everyone. It contains no personal information and expires after one year.
- Google Analytics cookies. See the next section.
- Local storage. The editor remembers small preferences, such as your chosen indentation, in your browser. Your data itself is never saved there.
Analytics
We use Google Analytics to understand how many people visit, which tools they use and roughly where they come from. Google Analytics sets cookies and receives information such as the pages you view, your browser type and a shortened IP address. It never receives the data you paste into the tools. You can read Google's privacy policy, or block analytics with a browser extension or Google's opt-out add-on. The tools work the same either way.
Server and hosting logs
Like most websites, our hosting provider may keep standard access logs, such as IP address, time and requested page, for security and troubleshooting. These logs don't contain the content you format or convert.
Accounts and personal information
There are no accounts. We don't ask for your name and we don't sell or share personal information with advertisers. The only personal information we might receive is an email address you type into Share Drop, or the address you write to us from.
Security
The site is served over HTTPS, so data between your browser and our server is encrypted. Even so, avoid pasting passwords, API keys or personal records into any online tool, including this one. Use the browser-only features, like formatting and validation, for sensitive data.
Children
The tools are meant for developers and are not aimed at children. We don't knowingly collect information from anyone under 16.
Changes to this policy
If the way we handle data changes, we'll update this page and the date at the top.
Contact
Questions about privacy? Email jsonxmleditor@gmail.com.