Legal

Privacy Policy

Effective date: April 29, 2026 — Last updated: April 29, 2026

1. Who we are

UtiliForge ("UtiliForge", "we", "us", or "our") operates the website at https://utiliforge.com and the free utility tools published under that domain. UtiliForge is operated as an independent project by its sole owner. References to a "site operator" in this policy mean that owner.

This Privacy Policy explains what information UtiliForge does and does not collect, how the site is operated, and what rights you have. It applies to every page on utiliforge.com and to any subdomains we operate.

2. Scope of this policy

This policy covers UtiliForge's website and tools. It does not cover third-party websites that we link to, products you reach by clicking external links, or services operated by other people that may use, copy, or embed our content. When you leave UtiliForge or load content hosted by another company (for example, a font file from Google Fonts), that company's privacy policy applies to that interaction.

3. What we collect (and what we don't)

3.1 What we do not collect

We do not collect, store, or transmit any of the following:

• Any text, code, file, token, password, key, or other content that you paste into any UtiliForge tool. All processing runs locally in your browser using JavaScript and never reaches our servers.
• Account credentials, names, email addresses, phone numbers or postal addresses (we do not offer accounts).
• Payment information (the site is free).
• Biometric, genetic, geolocation, or device sensor data.
• Browsing history outside UtiliForge.

3.2 What our hosting provider processes automatically

UtiliForge is hosted on Cloudflare Pages and served through Cloudflare's global network. To deliver the site, defend it against abuse, and serve cached files quickly, Cloudflare automatically processes a small amount of standard request information for every visit. This typically includes:

• IP address (used to route the response and to detect attacks);
• HTTP request line (the URL of the page or asset requested);
• User-Agent string (your browser and operating system as reported by your device);
• Referrer header (the page that linked to UtiliForge, if any);
• Approximate geographic region derived from the IP address;
• Date and time of the request;
• HTTP response status and bytes served.

This information is processed by Cloudflare under its own privacy and data-processing terms. UtiliForge does not maintain its own server-side logs, does not run server-side application code, and does not export, store, sell, or share this data. Where Cloudflare retains aggregated security or performance data on our behalf, it does so as our processor in line with its privacy policy.

3.3 Data you choose to send us

If you contact us by email or another channel listed below, we will receive whatever information you choose to include in that message (typically your email address and the contents of your message). We use that information solely to respond to you and to keep records of any obligations or correspondence that arise. We do not use it for marketing.

4. How the tools work

Every UtiliForge tool — every formatter, encoder, decoder, parser, validator, generator, counter and analyzer — is a self-contained HTML page that runs entirely on the device that loads it. When you click "Format", "Decode", "Generate", "Compute" or any equivalent button:

1. Your browser executes the JavaScript that ships with that page.
2. Your input is processed in your browser's memory.
3. The result is rendered back into the same page.

No request is made to UtiliForge's servers, and no copy of your input is sent anywhere by us. This means that even highly sensitive material — JWT tokens, API keys, customer data, secrets — that you paste into our tools never leaves your browser through anything UtiliForge does. We have no technical ability to read, recover or exfiltrate that data.

Two qualifications you should understand:

• Other software on your device may still see your input. Browser extensions, parental-control software, screen-sharing apps, accessibility tools and similar programs can read what is on your screen or in your DOM. UtiliForge has no control over those.
• Your network operator can see that you visited UtiliForge. Even though your tool input never leaves your browser, the fact that you loaded utiliforge.com is visible to the network you are connected to (your ISP, employer, school, VPN provider, etc.), which is a normal feature of how the internet works.

5. Legal basis for processing (GDPR / UK GDPR)

Where the EU General Data Protection Regulation, the UK GDPR, the Swiss FADP, or comparable laws apply, the limited information we (through our hosting provider) process is processed on the following lawful bases:

• Legitimate interests (Article 6(1)(f) GDPR) in delivering, securing and operating the website. These interests include detecting, mitigating and analyzing abuse, attacks, denial-of-service attempts, and traffic spikes; ensuring the site loads correctly; and protecting our infrastructure provider's network. We have assessed that these interests are not overridden by your rights and freedoms because the data processed is limited, security-oriented, and not used for profiling or marketing.
• Compliance with legal obligations (Article 6(1)(c) GDPR) where we are required to retain or disclose information by applicable law, court order, or binding government request.
• Consent (Article 6(1)(a) GDPR) for any optional features that may be added in the future and that depend on your active opt-in (for example, advertising cookies — see Section 8).

6. Third-party services

UtiliForge currently relies on the following third parties to deliver the site. Each one operates under its own privacy policy. We have minimized this list deliberately and we will update it whenever it changes.

We do not currently use Google Analytics, Tag Manager, social-media pixels, advertising networks, retargeting providers, fingerprinting providers, or any other tracking technology. If we ever add one, we will update this policy first and clearly disclose it here. See Section 8 for our plans around advertising.

7. Cookies and similar technologies

UtiliForge does not set first-party cookies and does not use localStorage, sessionStorage, IndexedDB or any other browser storage to track you across sessions. A small number of tools may use localStorage to remember a non-identifying preference (for example, an "indent with tabs vs. spaces" setting on the JSON Formatter); these values stay on your device, are scoped to your browser, and never leave it.

Cloudflare may set a security cookie (for example, __cf_bm) for short-lived bot-management purposes when its security features are triggered. This cookie does not identify you and is governed by Cloudflare's privacy policy.

The Google Fonts and cdnjs requests described in Section 6 are stateless and do not, by themselves, set cookies.

8. Advertising (future)

UtiliForge currently displays no advertising. We are planning to introduce display advertising in the future (most likely via Mediavine or a comparable network) once the site reaches the audience size required by such networks. When that change happens:

• This Privacy Policy will be updated, with the effective date at the top of the page changed accordingly.
• A separate cookie / tracking-technology disclosure and an advertising-partner list will be added to this section.
• Visitors located in the European Economic Area, the United Kingdom, Switzerland and other jurisdictions where opt-in consent is required will see an in-page consent prompt before any advertising-related cookies or identifiers are set on their device.
• Visitors located in California or other US states with opt-out rights will be offered the controls described in Section 13.

Advertising partners typically use cookies, mobile ad identifiers, IP-based estimation, and similar technologies to measure ad delivery and to limit the number of times the same advertisement is shown. They are independent controllers of any data collected through their tags; their privacy practices are governed by their own policies, which we will link to once advertising is enabled.

9. Data retention

Because we do not collect personal data through the site directly, there is no first-party retention period to disclose for tool input or browsing activity. Cloudflare retains the limited information described in Section 3.2 only for the periods set out in its own policies, principally for security analytics and abuse detection. Email correspondence you send us is retained for as long as is necessary to address the matter and meet any legal record-keeping obligations, then deleted.

10. Security

The site is served over HTTPS exclusively. The certificate is provisioned and rotated by our hosting provider. We follow reasonable measures to keep our deployment pipeline, source files and DNS configuration secure, but no system is perfectly secure and we cannot guarantee that an unauthorized person will never gain access. If we learn of a breach affecting personal information, we will notify affected users and the relevant authorities to the extent required by applicable law.

11. International transfers

UtiliForge operates globally and our service providers are based in multiple jurisdictions, including the United States. If you access the site from outside the country where the relevant provider is established (for example, you are in the European Economic Area and Cloudflare or Google processes data in the United States), the limited request information described above may be transferred internationally. Where such transfers are subject to GDPR or UK GDPR, our service providers rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, the EU–US Data Privacy Framework (where applicable) or other recognized transfer mechanisms.

12. Your rights

Depending on where you live, you may have the right to:

• request confirmation of whether we hold personal data about you, and a copy of that data ("access");
• have inaccurate personal data corrected ("rectification");
• have personal data deleted ("erasure" or "right to be forgotten");
• restrict or object to certain processing;
• receive a portable copy of personal data you provided to us ("portability");
• withdraw any consent you have given, without affecting the lawfulness of processing carried out before withdrawal;
• not be subject to decisions based solely on automated processing that produces legal effects (we do not make such decisions);
• complain to a supervisory authority — we list the relevant ones below.

Because UtiliForge does not collect or store personal information about its visitors directly, the practical effect of an access, rectification, erasure or portability request will usually be a confirmation that we hold no such data. If you have corresponded with us by email, that email exchange is the only personal data we are likely to hold about you, and we will action requests against it.

To exercise any of these rights, contact us using the details in Section 19. We will respond within the timeframes required by the law that applies to you (for example, one month under the GDPR, extendable by a further two months for complex requests). We may need to verify your identity in order to action a request. We will not charge a fee unless your request is manifestly unfounded or excessive.

13. California (CCPA / CPRA) notice

This section provides additional disclosures required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA").

Categories of personal information collected. In the past twelve months, the only category of "personal information" (as defined by the CCPA) that has been processed in connection with UtiliForge is "Internet or other electronic network activity information" — specifically, the request metadata described in Section 3.2 — which is processed by our hosting provider on our behalf. We have not collected any other CCPA category, including identifiers, commercial information, biometric information, geolocation data, sensory data, professional information, education information, inferences, or sensitive personal information.

Sources. We obtain that information directly from your device when it makes a request to our site.

Business purposes. We use it to deliver the site, to maintain its security, and to comply with law.

Disclosure for business purposes. The only third party that processes this information is our hosting provider, acting as our service provider.

"Sale" or "sharing" of personal information. We do not sell personal information and we do not "share" personal information for cross-context behavioural advertising as those terms are defined by the CCPA. We have not done so in the past twelve months. We do not knowingly sell or share personal information of consumers under sixteen years of age. If we ever introduce advertising features that constitute a "sale" or "share", we will provide a clear "Do Not Sell or Share My Personal Information" link, update this policy, and treat opt-out preference signals (such as Global Privacy Control) as a valid opt-out request.

Your CCPA rights. California residents have the right to know what personal information we hold, to request deletion, to request correction, to opt out of any sale or share, to limit the use of sensitive personal information, and to be free from retaliation for exercising these rights. Submit a request via the contact details in Section 19. You may use an authorized agent; we may require proof of authorization.

14. EEA, United Kingdom and Switzerland notice

If you are located in the European Economic Area, the United Kingdom or Switzerland, the data controller for the limited processing described in this policy is the UtiliForge site operator. You may contact us using the details in Section 19. You have the right to lodge a complaint with the data protection authority in the country where you live, work or believe an infringement has occurred. A list of EEA supervisory authorities is published by the European Data Protection Board; the UK authority is the Information Commissioner's Office (ico.org.uk); the Swiss authority is the Federal Data Protection and Information Commissioner (edoeb.admin.ch).

15. Other regional notices

Brazil (LGPD). If you are a "data subject" under the Lei Geral de Proteção de Dados, you have rights similar to those described in Section 12. Contact us as set out in Section 19 to exercise them. The Brazilian National Data Protection Authority (ANPD) is the competent supervisory authority.

Canada (PIPEDA / Quebec Law 25). Canadian residents may exercise rights of access and correction by contacting us as set out in Section 19. Quebec residents have additional rights to data portability and to be informed about automated decision-making (we do not make automated decisions that produce legal or similarly significant effects).

Australia. If you are an Australian resident under the Privacy Act 1988, you may request access to or correction of personal information by contacting us. Complaints may be directed to the Office of the Australian Information Commissioner.

South Africa, India, and other jurisdictions. Where local data-protection law grants you analogous rights (for example, under POPIA or the DPDP Act), we will honour those rights to the extent they apply to us.

16. Children

UtiliForge is intended for a general developer and writer audience. We do not knowingly collect personal information from children under the age of 13 (or under the higher age threshold that applies in some jurisdictions, such as 16 in parts of the EU and 14 in some US states). The site does not solicit such information and the tools have no functionality that depends on a child's identity. If you believe that we have inadvertently received information from a child, please contact us using the details in Section 19 and we will delete it.

17. Do Not Track and Global Privacy Control

UtiliForge does not currently track visitors across websites. As a result, "Do Not Track" headers and Global Privacy Control signals do not change anything we do today, because we already do not engage in cross-context tracking. If we ever introduce features that would otherwise trigger such tracking, we will treat a Global Privacy Control signal sent from your browser as a valid opt-out of any "sale" or "share" of personal information for the duration of that browser session, in line with current California guidance.

18. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in the site, in our service providers, or in applicable law. When we do, we will update the "Last updated" date at the top of this page. If the changes are material — for example, we begin running advertising or introduce a new category of data processing — we will give clear notice on the homepage of UtiliForge, and where the law requires it, we will obtain your consent before any new processing begins. The most current version of this policy is always available at utiliforge.com/privacy; previous versions are available on request.

19. Contact us

You can reach the UtiliForge site operator with privacy questions, rights requests, or any other concerns at:

Email: contact@utiliforge.com
Postal address: available on request to the email address above.

Where the law requires it, we may need to verify your identity before responding to a request. We will respond as quickly as we can and in any case within the time frames required by applicable law.

See also: Terms of Service