Privacy Policy

Last updated: 30 October 2026

This policy explains what information online-json.com collects when you use the website and its tools, why, how long it is kept and the choices you have. It covers online-json.com and its subdomains, such as classic.online-json.com. "We", "us" and "our" mean the operator of online-json.com.

1. Data you paste into the tools

The formatter, validator, viewer, editor, converters, compare tool, minifier, escape, repair and parser tools all run as JavaScript in your browser. The JSON, CSV, YAML, XML or text you type, paste, drop or open is processed on your own device. It is not sent to our servers, and we cannot see it.

2. Data stored in your browser

To make the tools more convenient, some information is kept in your browser's local storage (localStorage and IndexedDB) on your device:

• Saved JSON: documents you choose to save, with their title, note and dates.
• Settings: your editor font, size, colour theme and other preferences, and your light or dark theme choice.
• Last input and tool options: the last JSON you worked on in each tool and the options you picked, so they are there when you come back. You can turn this off with "Remember last input" in Settings.

This information never leaves your device unless you export it yourself. You can delete it at any time from the Saved panel, in Settings, or by clearing this site's data in your browser. Clearing your browser data also deletes your saved JSON, so use Export in the Saved panel if you want a backup.

3. Share links

When you press Share and create a link, we store the content of both editors, the title you give it, and the expiry period you pick. Anyone who has the link can open it, so do not share anything confidential, such as passwords, API keys or other people's personal data.

Shared content is stored in our database, which is hosted by DigitalOcean. A link stops working when it expires, and expired links are deleted within a day. If you want a link deleted sooner, email us the link and we will remove it.

4. Feedback

When you send feedback, we store your rating, the category you choose, your message and, only if you enter it, your email address. To help us reproduce problems, we also store the page you were on, your screen size, your browser and its version, your operating system and your device type. We use this only to improve the site and, if you gave your email address, to reply to you. Feedback is stored in our database, hosted by DigitalOcean.

5. Analytics

We use Google Analytics 4 to understand how many people visit, which tools they use and how the site performs, so we can decide what to improve. Google Analytics sets cookies (such as _ga) and collects information such as the pages you view, how you arrived at the site, your approximate location (country or city, derived from your IP address), and your browser, device and operating system. Google Analytics 4 does not log or store IP addresses. We do not use Google Analytics for advertising.

Google processes this data on our behalf under its own terms and privacy policy. You can block analytics by refusing or deleting cookies in your browser, by using a content blocker, or by installing the Google Analytics opt-out browser add-on.

6. Server logs and security

Like most websites, our web server records basic technical information about each request, such as the IP address, the date and time, the page requested, the referring page and the browser's user agent. We use these logs to keep the site secure and working, and to investigate errors and abuse. They are kept for a limited period and then deleted or rotated.

To prevent abuse of share links and feedback, the server keeps a short-lived, hashed record of the IP address making each request, which expires after about a minute.

7. Cookies

online-json.com itself does not set cookies. The only cookies on the site are the Google Analytics cookies described above. Your saved JSON and settings use browser storage rather than cookies, as described in section 2. You can block or delete cookies in your browser's settings, and the tools will keep working.

8. Legal bases for processing

Where data protection laws such as the GDPR or UK GDPR apply, we rely on:

• Your request, to create and serve a share link or to receive and answer your feedback.
• Our legitimate interests in understanding how the site is used, improving it, and keeping it secure, for analytics and server logs.
• Your consent, where the law requires consent for cookies or similar technologies.

9. Who we share data with

We do not sell, rent or trade your personal information, and we do not share it for advertising. We only share it with service providers that help us run the site, and only as far as they need it:

• DigitalOcean, which hosts the web server and the database for share links and feedback.
• Cloudflare, which delivers the site and protects it from attacks.
• Google, which provides Google Analytics.

We may also disclose information if the law requires it, or to protect the rights, safety and security of our users, the public or the site.

These providers may process data in countries other than your own, including the United States. Where required, they do so under safeguards such as the European Commission's Standard Contractual Clauses.

10. How long we keep data

• Share links: for the expiry period you choose, or until you ask us to delete them. Links set to "Never" expire are kept until you ask us to delete them or we close the service.
• Feedback: for as long as it helps us improve the site, or until you ask us to delete it.
• Analytics: according to our Google Analytics retention settings, at most 14 months for event-level data.
• Server logs: for a limited period, for security and troubleshooting.
• Browser storage: until you delete it. We never receive it.

11. Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, to correct it, to delete it, to restrict or object to how we use it, to receive a copy in a portable format, and to withdraw your consent at any time. If you are in the European Economic Area or the United Kingdom, you can also complain to your local data protection authority.

If you are a California resident, you have the right to know what personal information we collect and how we use it, to ask us to delete or correct it, and to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined in the California Consumer Privacy Act, and we will not treat you differently for exercising your rights.

To exercise any of these rights, email us at the address below. Because we do not have user accounts, please include enough detail to find your data, such as the share link or the email address you used for feedback.

12. Children

online-json.com is a tool for developers and is not directed at children. We do not knowingly collect personal information from children under 13, or under 16 where local law sets a higher age. If you believe a child has sent us personal information, for example in feedback, please contact us and we will delete it.

13. Security

The site is served over HTTPS. Share links and feedback are sent to our server, which talks to the database with a key that never reaches your browser, and share links use long random identifiers that are hard to guess. No method of storing data online is completely secure, so please do not put sensitive information in share links or feedback.

14. Links to other websites

The site links to other websites, such as documentation and the services named in this policy. Their privacy practices are their own, and we encourage you to read their policies.

15. Changes to this policy

We may update this policy when the site or the law changes. We will change the "Last updated" date at the top, and for significant changes we will make the update clear on the site.

16. Contact

For any question about this policy or your data, email [email protected]. You can also use the Feedback button on any page.

See also our Terms & Conditions.