Trust
Privacy
DevTooKit is built so your developer payloads never need to leave your device. Here is exactly what that means.
Local processing
All 91 tools run in your browser with client-side JavaScript. When you format JSON, decode a JWT, hash a string, test a regex, or convert configs, the work happens on your machine. We do not operate a processing API that receives your inputs.
What we never collect
- Tool inputs: JSON, YAML, tokens, passwords, hashes, file bytes
- Filenames or document contents from browser tools
- Accounts, emails, or phone numbers required to use the tools
- Advertising profiles built from what you paste into tools
Analytics
We use Google Analytics for anonymous page-view metrics (which tools and pages are opened). Events never include payloads, JWTs, secrets, or file contents. Analytics helps us decide what to improve — not to read your data.
Verify it yourself (Network tab)
- Open DevTools → Network (filter: Fetch/XHR).
- Paste a sample JWT or JSON into a tool and run it.
- You should not see your payload uploaded to DevTooKit servers. Processing stays in the tab (and Web Workers where used).
- After install as a PWA, many tools keep working offline.
That Network-tab check is the fastest way to confirm local-first behavior before you paste anything sensitive.
Local storage
Preferences such as theme, favorites, and recently used tools may be saved in your browser's local storage — on this device only. Clear site data anytime from your browser settings.