Privacy
The short version
JSONForge is a set of static files. There is no server that receives your JSON, because there is no server-side code at all. Parsing, formatting, diffing, repair and schema inference all run inside a Web Worker in your own browser tab.
What we could technically send (and do not)
Nothing. The document you paste or drop is held in memory in the tab and, if you use history, in IndexedDB on your device. It is never written to window, to data-* attributes, to the page title, or to a URL query string. Share links put the payload in the URL fragment (#s=…), which browsers do not transmit to any server.
What is stored on your device
One localStorage key (language preference) and, optionally, an IndexedDB database holding up to 50 recent history entries. Clearing site data removes all of it. We cannot read any of it, because it never leaves your device.
Third-party requests on this site
One: Cloudflare Web Analytics, which is cookie-free and collects no personal data. There are no advertising scripts and no social widgets. No request this page makes ever carries your document — it is never exposed to the DOM as a value a script could exfiltrate, nor to the network.
Service worker
The service worker caches the app shell so the site works offline. It explicitly never caches or proxies requests to the analytics origin.
No accounts, no tracking cookies
There is no sign-up, no login, no email collection and no cross-site tracking cookie. We have no way to identify you.
Children and sensitive data
Because nothing is transmitted, pasting confidential data is materially safer than with any server-based tool. That said, browser extensions on your own machine can still read the page — use a clean profile for genuinely sensitive material.
Changes
If this policy changes, the new version will appear on this page with an updated date. The architectural claim (no backend) cannot quietly change: removing it would require shipping a server.
Learn more: Back to the tool.