FormatFlow Privacy Policy: Client-Side Processing Guarantees

Your privacy is guaranteed by design. FormatFlow executes all text transformations, hashes, and formatting locally on your device. Nothing is sent to our servers.

1. Zero Server Processing of User Input

When you format JSON, count words, decode Base64, generate passwords, or test regular expressions, the computation executes strictly within your web browser's JavaScript sandbox. We do not transmit, log, inspect, or retain your text, files, passwords, or code snippets on any server.

2. Local Storage Usage

We use browser localStorage solely to persist your local interface preferences:

• Your chosen visual theme mode (Light, Dark, or System)
• Your pinned favorite tools and recently opened tool history
• Your cookie consent preference selection

We never store generated passwords, decoded JWT payloads, or password-checker inputs in localStorage or cookies.

3. Optional Breach Checks (Have I Been Pwned)

If you explicitly opt-in to the breach checking feature on our Password Strength page, your browser hashes your password locally using SHA-1 and sends only the first 5 hexadecimal characters of the hash to the Have I Been Pwned API using k-Anonymity. Your plaintext password never leaves your browser.

4. Advertising and Telemetry

Optional privacy-friendly analytics and advertising hooks remain disabled by default unless explicitly activated and consented to by the user. Advertisements are never placed inside tool controls.