Your privacy matters
We built FormatCraft on a simple principle: your data stays on your device. Here's everything you need to know about how we handle information.
Last updated: September 2026
The short version
1. Overview
FormatCraft ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we handle information when you use our website at formatcraft.com and all associated tools. Our platform is built on a privacy-first principle: all tools run entirely in your browser, meaning your data is never sent to our servers. The only exception is Private Notes, which stores an end-to-end encrypted copy of a note that we cannot read (see Section 8).
2. Data We Collect
We do not collect, store, or process any personal data that you input into our developer tools. All processing happens locally in your browser. We may collect limited, anonymised technical data through analytics services (see Section 4) to understand how the site is used in aggregate, such as page views, browser type, and country-level location. This data cannot be used to identify you individually.
3. Cookies
We use a minimal set of cookies required for the site to function correctly. These include:
• Theme preference — stored in your browser's localStorage (not a cookie) to remember light/dark mode. • Analytics cookies — if analytics are enabled, a third-party service may set cookies to measure site traffic. These cookies do not contain personally identifiable information.
You can disable cookies in your browser settings. Doing so may affect your experience (e.g. your theme preference won't be remembered).
4. Analytics
We may use a privacy-friendly analytics tool (such as Google Analytics, Plausible, or a similar service) to understand aggregate traffic patterns. If third-party analytics are used, they are configured to anonymise IP addresses and not share data for advertising purposes. We do not use analytics to track individual users across sessions.
5. Third-Party Services
Our site may integrate with the following third-party services:
• Web3Forms — used to process contact form submissions. When you submit the contact form, your name, email, and message are sent to Web3Forms' servers to deliver your message to us. Please refer to Web3Forms' privacy policy for details. • Google Fonts / CDN providers — used to load fonts and UI libraries. These requests may log your IP address as part of standard web infrastructure. • GitHub — linked as a reference. Visiting external links is governed by those platforms' own privacy policies.
6. Advertising
FormatCraft is currently ad-free. We may in the future display advertisements via Google AdSense or a similar service to support ongoing development. If we do, we will update this policy. Ad networks may use cookies to serve relevant advertisements based on your browsing activity across websites. You can opt out of personalised advertising by visiting Google's Ads Settings or by using the Network Advertising Initiative opt-out page.
7. Local Data Storage
Some tools may save settings or preferences in your browser's localStorage to improve your experience (e.g. remembering your last input). This data is stored exclusively on your device and is never transmitted to us. You can clear this at any time through your browser's developer tools or site settings.
8. Private Notes
When you create a private note, it is encrypted in your browser (AES-256-GCM) before it is uploaded. The decryption key is part of the link after the "#" sign; browsers never send that part to a server, so we cannot read your notes.
• What we store: the encrypted note, its expiry settings, and hashes that let the recipient open it and let you destroy it. No names, emails or accounts. • Deletion: a note is permanently deleted when it is read (by default), when it expires (at most 30 days), when you destroy it, or after 5 wrong password attempts. A record that the note was read (without content) is kept for 30 days so you can check its status. • Abuse prevention: your IP address is used briefly to rate-limit requests and is not stored with the note. • Analytics are disabled on note-reading pages so the link (and its key) is never sent to an analytics provider. • "My notes" is a list kept only in your browser's localStorage; it contains note ids and delete tokens, never note text or keys.
Notes are stored with Upstash (Redis) through our hosting provider, Vercel.
9. Children's Privacy
FormatCraft is intended for developers and general users aged 13 and over. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will take steps to delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically. Continued use of the site after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us:
Website: formatcraft.com/contact
Tools process your input in your browser. Private Notes are stored end-to-end encrypted.