Privacy Policy
Last updated
The short version
- The text, code, JSON, tokens and files you put into DevTab's tools are processed in your browser and are not sent to our servers.
- A small number of tools need the network to do their job (two AI tools, DNS Lookup, the password breach check and Font Pairing). Each is listed below, so you can decide before you use it.
- We use privacy-friendly analytics to count page views. We have no accounts, no ads and we don't sell data.
What you type into a tool
DevTab's tools — the JSON formatter, JWT decoder, regex tester, diff, hash and encryption tools, converters, generators and the rest — are written in TypeScript and run in your browser tab. Your input lives in the page's memory while the tool is open and disappears when you close or reload the tab.
You can check this yourself: open your browser's DevTools, switch to the Network tab and use any tool marked as client-side. Nothing is sent.
The interactive Labs work the same way. The code you paste into the event loop visualizer, the headers you edit in the CORS lab and every simulation run locally. If you use a Share link that contains your own code, that code is stored in the part of the address after the “#”, which browsers never send to servers — it is visible only to people you share the link with.
The few things that do use the network
These are the only features where information leaves your browser. Each one only happens when you use that specific tool.
| Feature | What is sent | To whom |
|---|---|---|
| AI tools (SQL Explainer, Stack Trace / Error Explainer) | The text you submit in the tool, only when you click the button. | DevTab's server, which forwards it to Anthropic's API (Claude) to produce the answer. We don't store it in a database. Don't paste secrets, passwords or personal data. |
| DNS Lookup | The domain name and record type you query. | The DNS-over-HTTPS resolver you choose (Google Public DNS or Cloudflare). |
| Password breach check | Only the first 5 characters of the SHA-1 hash of the password (the “k-anonymity” method). The password itself and the full hash never leave your browser. | Have I Been Pwned's range API. |
| Font Pairing | A normal request for the font stylesheet. | Google Fonts, which sees your IP address and browser details. |
Those providers process the data under their own terms and privacy policies. Beyond these features, DevTab's tools make no requests with your input.
Analytics
To learn which tools and labs are useful, we use two lightweight analytics scripts: Umami (a cookieless analytics service) and a first-party analytics script operated by the site owner. They record page views and basic context: the page or tool path, referrer, browser and device type, language and approximate country.
They do not receive the contents of your inputs, and we don't use them for advertising or to build profiles of individual people. If you prefer not to be counted, a content blocker or your browser's “Do Not Track” and tracking-protection features will stop them, and DevTab works the same either way.
Hosting and server logs
DevTab is hosted on Vercel. Like any web host, it processes technical connection data such as your IP address, user agent and the URL requested, and may keep short-lived logs for security and reliability. This covers loading pages — not the contents of your tool input.
Third-party content
The home page may show a Product Hunt badge, which is loaded from Product Hunt's servers and therefore sees a normal web request (including your IP address). Links to other websites are governed by those websites' own policies.
Data stored on your device
DevTab uses your browser's local storage for small conveniences. This data stays on your device and is never sent to us:
- Theme (light or dark) —
devtab-theme - Bookmarked tools —
devtab:bookmarks - Recent searches in the command palette —
devtab:recent-searches - Sidebar state (open/closed) —
devtab-sidebar-open,devtab-labs-sidebar
Clearing your site data in the browser removes all of it. We don't set advertising or cross-site tracking cookies.
What we don't do
- No accounts, sign-ups or email collection.
- No advertising, ad trackers or tracking cookies.
- No selling, renting or sharing of personal data.
- No logging of what you paste into client-side tools.
- No payments are processed on DevTab today. If paid plans are introduced, this policy will be updated first.
Your choices
You can use almost everything on DevTab with analytics blocked and with the network turned off after the page loads. If you want us to answer a privacy question or delete something you sent us by email, write to us at the address below.
Changes and contact
If this policy changes, the new version is posted on this page with a new “last updated” date. Material changes — for example, adding a new tool that sends data to a server — will be called out here. Questions: arora.abhilaksh@gmail.com.
See also: Terms of Service.