Privacy
Scrawlspace is free and has no accounts. This page sets out what stays on your device, what goes over the network and why, and what the ads and visitor counts on the site collect.
Your files stay in your browser
The PDF, image, JSON, diff, CSS and developer tools run on your device. The files, text, tokens and passwords you put into them are processed in your browser and are not uploaded to Scrawlspace or anyone else. Once a tool has loaded it keeps working offline, and your browser's network tab will show no upload while you use it.
When something does go over the network
OCR PDF downloads a language's recognition model from the jsDelivr CDN the first time you use that language. Only the model is downloaded; your PDF stays on your device.
What's My IP asks our server for your public IP address, which every server you visit can see, and the approximate location our host attaches to it.
The whiteboard's live sessions, share links and sync are encrypted in your browser before they're sent. The key is kept in the part of the link after #, which browsers never send to a server, so our servers only ever hold data they can't read.
API request cards on a board are sent through our server, so websites that block browser requests still answer. The request and its response pass through the server to do that and aren't kept.
Ads
Scrawlspace shows Google ads to help keep it free. Google and its partners may use cookies to show ads, including ads based on your visits to this and other sites, and to measure them. You can turn off personalised ads in your Google ad settings, and Google explains how it uses data from sites that show its ads at policies.google.com/technologies/partner-sites.
Ads never load on the pages where you type secrets or open private documents: JWT Decoder & Encoder, Password Generator, Hash Generator, Encode / Decode, Protect PDF, Unlock PDF, Redact PDF and your own whiteboard boards. Opening one of them after an ad has loaded reloads the page, so it starts without the ad script.
Visitor counts
Vercel Web Analytics counts visits: which pages are opened, the referring site, the country, and the type of browser and device. It doesn't use cookies, and it isn't used to identify you.
Neither the ads nor the visitor counts are sent your files or anything you type into the tools.
What's kept on your device
Your boards, favourite tools, recent searches and some tool inputs are saved in your browser's storage so they're still there next time. They stay on that device unless you turn on board sync. Clearing this site's data in your browser removes them.
Questions
Scrawlspace is made by Vikas Kushwaha. You can get in touch through github.com/Tracevikas.