Introduction
jwtdecode.io ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we handle information when you use our JWT decoder and inspector tool at https://jwtdecode.io.
Data Processing
Local Processing Only
All JWT decoding and signature verification happens entirely in your browser. We do NOT:
- Upload your JWT tokens to our servers
- Store your tokens or secret keys
- Transmit your data over the internet
- Share your data with third parties
- Have access to your data in any way
Your JWT tokens remain 100% private and stay on your device at all times.
Information We Collect
Anonymous Analytics
We may use analytics services (such as Google Analytics or Cloudflare Analytics) to collect anonymous information about how visitors use our site, including:
- Pages visited
- Time spent on site
- Browser type and version
- Device type (mobile, desktop, tablet)
- Geographic location (country/city level only)
- Referring website
This data is aggregated and anonymous. We cannot identify individual users.
Cookies
Our website may use cookies for:
- Analytics (to understand site usage)
- Advertising (Google AdSense, if implemented)
Third-Party Services
Google AdSense
We may display advertisements served by Google AdSense. Google uses cookies to serve ads based on your prior visits to our website or other websites. You can opt out of personalized advertising by visiting Google Ads Settings.
Cloudflare
Our website may be hosted on Cloudflare Pages or protected by Cloudflare. Cloudflare may collect certain technical information for security and performance purposes. See Cloudflare's Privacy Policy.
Hosting Providers
Our website is hosted on secure, reputable hosting platforms (such as Vercel, Netlify, or similar). These services may collect standard server logs including IP addresses, access times, and pages viewed.
Your Rights (GDPR/CCPA)
If you are in the European Union or California, you have certain rights regarding your data:
- Right to Access: Request information about data we collect
- Right to Deletion: Request deletion of your data (note: we don't store JWT tokens or user data)
- Right to Opt-Out: Opt out of analytics and advertising cookies
- Right to Object: Object to processing of your data
Data Security
Since all JWT processing happens in your browser and we don't store any user data, there is minimal security risk. Our website uses HTTPS encryption to protect data in transit between your browser and our servers.
We recommend:
- Using a secure, up-to-date web browser
- Being cautious when pasting production secrets or sensitive tokens
- Using the tool only in trusted environments for production data
- Clearing your browser cache/history after processing sensitive data
Children's Privacy
Our service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of any material changes by updating the "Last Updated" date at the top of this page.
Contact Us
If you have any questions about this Privacy Policy, please contact us at:
- Email: privacy@jwtdecode.io
- Website: https://jwtdecode.io