Privacy Policy for DevSandbox

Last updated: September 18, 2026. This Privacy Policy outlines how DevSandbox handles user data, how client-side processing protects your source code, and our disclosures regarding third-party advertising and cookies.

1. Zero Collection of Developer Data and Snippets

DevSandbox is designed so that your sensitive data never leaves your computer. When you use any tool on DevSandbox — including the JSON Formatter, Diff Checker, JWT Decoder, JSONPath Tester, Regex Tester, Base64 Encoder, URL Encoder, Unix Timestamp Converter, and YAML-JSON Converter:

• 100% Client-Side Execution: All data parsing, validation, comparison, encoding, and decoding occur strictly in your local browser tab.
• No Server Storage or Logging: We do not operate an ingestion API, database, or logging pipeline for your pastes. Nothing you input is ever sent to our servers.
• No User Accounts: We do not require, offer, or collect account registrations, passwords, or emails to access our utilities.

2. Share Links and Private URL Fragments

When you use the optional "Share" feature on tools like Diff Checker or JSON Formatter, your payload is compressed and encoded into the URL fragment (the portion of the web address following the # character). According to the RFC 3986 standard, web browsers never transmit the URL fragment to web servers in HTTP request headers. The fragment remains exclusively on your local machine and is decoded client-side by anyone who opens the complete link.

3. Third-Party Advertising and Google AdSense

To sustain the free availability of DevSandbox without paywalls, we display non-intrusive advertisements served by third-party advertising networks, including Google AdSense.

• Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites on the internet.
• Google's use of advertising cookies enables it and its partners to serve ads to users based on their visits to DevSandbox and/or other sites on the Internet.
• Users may opt out of personalized advertising by visiting Google Ads Settings. Alternatively, you can opt out of third-party vendor use of cookies for personalized advertising by visiting aboutads.info.

4. Cookies and Local Storage

DevSandbox does not set first-party tracking cookies. We utilize standard browser localStorage solely to remember non-sensitive UI preferences:

• Your preferred visual theme (light or dark mode).
• Your split workspace divider position (e.g. 50/50 ratio).
• A short list of recently visited tool slugs (no pasted data is ever stored).

5. Content Security Policy (CSP) Enforcement

We enforce our privacy promises via technical HTTP response headers. Every page on DevSandbox is delivered with a strict Content Security Policy that restricts outbound network connections. The browser platform enforces this policy, rendering data exfiltration technically impossible.

6. CCPA and GDPR Privacy Rights

Under the California Consumer Privacy Act (CCPA) and General Data Protection Regulation (GDPR), users have specific rights regarding personal data. Because DevSandbox does not collect, store, or sell personal identifiers or pasted technical information, your sensitive engineering data remains entirely in your control at all times.

7. Contact and Inquiries

If you have any questions or concerns regarding this Privacy Policy, please reach out via our Contact page.