Privacy Policy

Your input never leaves your device. Every decoder on decoder.tools is implemented as client-side JavaScript that runs inside your browser. When you paste a token, a certificate, a packet dump or a file, it is processed in the page you already have open. No network request carries it anywhere, we never receive it, and there is nothing for us to store, sell or hand over.

Files you load into tools that accept them — images, audio, captures, archives — are read in your browser’s memory the same way. They are not uploaded. Nothing is written to disk, and closing or reloading the tab discards everything.

We collect aggregate usage data so we know which tools people actually need and which pages are broken. Specifically:

• Analytics. We use Google Analytics to measure page views, referrers, approximate location (country or region level, derived from IP), device type and browser. This tells us that a page was visited — never what was typed into it.
• Server request logs. Like any website, our hosting provider records standard request data — IP address, user agent, requested URL and timestamp — to deliver pages and to protect against abuse.
• Email you send us. If you write to contact@decoder.tools, we keep that message and your address for as long as it takes to deal with what you raised.

• The content you paste into any decoder, or the files you load into one.
• The results any decoder produces.
• Accounts, passwords or profiles — there is no sign-up on this site.
• Payment details — nothing here is paid for.
• Any attempt to identify you personally or build a profile across sites.

The decoders themselves set no cookies. Google Analytics sets its own cookies to distinguish one visitor from another and to measure sessions; you can block them with any browser setting or extension that blocks analytics, and every tool on the site will keep working exactly as before.

The site may also store a small preference in your browser’s local storage — a colour-theme choice, for example. That value stays on your device and is never transmitted.

We keep third-party involvement to the minimum that still lets the site work:

• Google Analytics(Google LLC) — aggregate traffic measurement. Google’s handling of that data is governed by its own privacy policy.
• Our hosting provider — serves the pages and keeps standard access logs.
• The Iconify public API— the interface icons are fetched from Iconify’s CDN, which therefore sees your IP address and which icons a page requested. It sees nothing else.

Fonts are self-hosted and served from this domain, so no request is made to a font provider. We run no advertising, no third-party trackers beyond the analytics named above, and no session recording.

Depending on where you live, you may have the right to access, correct or delete personal data we hold about you, to object to processing, or to lodge a complaint with a supervisory authority. In practice, the only personal data we are likely to hold is an email you sent us and analytics data that is not tied to your identity.

To exercise any of these rights, write to contact@decoder.tools. To opt out of analytics entirely, use a browser or extension that blocks it — the site is designed to work perfectly without it.

decoder.tools is a technical utility aimed at developers and professionals. It is not directed at children, and we do not knowingly collect personal data from them.

If we change how data is handled, this page is updated and the date at the top changes with it. The core commitment — that what you paste into a decoder stays on your device — is architectural, not a policy choice, and is not something we intend to revisit.

Is the data I paste into a decoder uploaded anywhere?

No. Every decoder runs as client-side JavaScript inside your browser. Your input is processed in the page you already have open, is never sent to a server, and is discarded when you close or reload the tab.

Does decoder.tools use cookies?

The decoders themselves set no cookies. Google Analytics, which we use to measure aggregate traffic, sets its own cookies to distinguish visitors. It never receives the content you paste into a tool.

Do you log the tokens or certificates I decode?

There is nothing to log. The decoding happens on your device, so the content never reaches our infrastructure in the first place.

Questions about this policy, or about anything on the site, go to contact@decoder.tools. See also our terms of use and the about page.