1. Core Architecture & Local Processing
At JWT Secret Key Generator (https://jwtsecretkey.com), we believe that cryptographic tools handling authentication credentials must respect user privacy by design. Our primary utilities—including the JWT Secret Key Generator, JWT Decoder, UUID Generator, Base64 Converter, and SubtleCrypto Hash Generator—execute 100% locally within your client web browser using the W3C Web Cryptography API (window.crypto.getRandomValues).
Generated secret keys, pasted JSON Web Tokens, and user payloads are held strictly in temporary client-side memory. They are never transmitted over the internet to our servers or any third-party infrastructure.
2. Information We Do Not Collect
- Zero Secret Key Storage: We do not log, capture, or store generated cryptographic secrets or passwords.
- Zero Token Logging: When you paste a token into the JWT Decoder, it is parsed locally via client JavaScript. We do not store tokens or inspected claims.
- No User Account Database for Public Visitors: Public tool users do not register, submit passwords, or create profiles.
3. Information Collected Automatically (Server Logs)
When you access our website, our web server (Nginx on our self-hosted VPS) automatically collects standard HTTP request logs. This information includes:
- Internet Protocol (IP) address.
- Browser type and operating system (User-Agent string).
- Referring URLs and pages requested on our domain.
- Date and time of requests.
Server access logs are retained strictly for security monitoring, DDoS prevention, rate-limiting enforcement, and diagnostic troubleshooting. They are rotated automatically and are never cross-referenced with tool activities.
4. Third-Party Advertising & Google AdSense
This website is designed to support advertising via Google AdSense to fund free developer tooling. When advertising is enabled on this website:
- Third-party vendors, including Google, use cookies to serve advertisements based on a user's prior visits to this website or other websites on the internet.
- Google's use of advertising cookies enables it and its partners to serve ads to our users based on their visit to our site and/or other sites on the Internet.
- Users in the European Economic Area (EEA), United Kingdom (UK), and Switzerland are presented with a consent banner allowing them to accept or reject advertising cookies before ads are served.
- Users may opt out of personalized advertising at any time by visiting Google Ads Settings or through the Network Advertising Initiative opt-out page at aboutads.info.
5. Cookies and Consent Preferences
We classify cookies into three distinct categories:
- Strictly Necessary Cookies: Essential for language preferences and administrative session security. Cannot be disabled.
- Analytics Cookies: Anonymously measure page views and help us improve developer documentation.
- Advertising Cookies: Used by Google AdSense when configured to display relevant developer advertisements.
You can modify or withdraw your consent at any time by clicking "Cookie Preferences" in our website footer.
6. Your Rights Under GDPR & CCPA/CPRA
Depending on your location, you have rights regarding your personal data, including the right to access, rectify, or request erasure of server log entries containing your IP address. To exercise any of these rights, contact our Data Protection Officer at:
7. Browser Extension
Our optional browser extension, JWT Secret Key Generator & Decoder, runs entirely inside your browser. It makes no network requests, sends no data to us or to any third party, and contains no analytics, advertising or tracking code. It requests only two permissions: contextMenus, to add right-click shortcuts when you select text, and storage, to remember your last used tab and theme on your device and to hand text you selected over to the extension window, which is deleted as soon as it is read. Tokens, keys and any other text you enter are never stored or transmitted. The link inside the extension that opens jwtsecretkey.com opens a normal browser tab, and visiting this website is covered by the rest of this policy.