Privacy Policy

At JSONObject Online, we believe your data belongs solely to you. Our service is designed around a local-first architecture. We do not track you, we do not run advertisements, and we do not collect, store, or sell any personal information or JSON payloads.

To provide a fully functioning editor with format, validation, and layout tools, we use essential client-side persistence cookies in the form of Local Storage (localStorage) and Session Storage (sessionStorage).

These cookie-like stores reside entirely on your device. They store your formatting configurations, custom editor settings, dark mode preferences, and your active input payload. Without these browser-local cookies, formatting and parsing would be impossible, as your active code settings would be erased on every page refresh or interaction.

When you decide to share your JSON payload with others, we employ a secure client-side encryption process:

• Client-Side Encryption: Your data is encrypted right inside your browser using the AES-GCM (256-bit) cryptosystem.
• Decryption Key Fragment: The key required to decrypt your data is stored in the URL hash fragment (the string of text after the # character).
• Zero-Knowledge Server Logs: According to standard web protocols, hash fragments are never sent to web servers. Therefore, the decryption key is only in the possession of the sender and those they choose to share the URL with. We hold no mechanism to view or decrypt your shared content.

JSONObject Online does not use any third-party tracking scripts, cookie trackers, or analytics platforms. Our database is used solely to store the encrypted payloads of shared snippets.

We may update our Privacy Policy from time to time. We will notify you of any changes by updating the last modified date at the top of this page. You are advised to review this policy periodically for any changes.