Privacy: JSON Tools That Don't Leave Your Browser

JSON, JWT, and Base64 tools that process every byte locally in your browser tab — no upload endpoint, no server-side logs of pasted payloads.

When you land here

You're about to paste a webhook payload, an API sample, or a JWT into a formatter and you're not sure if it stays on your machine. Every tool on this hub runs entirely in your browser — no upload endpoint exists. Use these for production samples, customer data, or anything you wouldn't paste into a random search box.

What 'local' means here

The repair, validation, format, minify, copy, and diff actions run entirely on the page. The tool does not have an upload endpoint and does not need one. Still remove secrets before pasting examples anywhere — the local guarantee covers this site, not your browser extensions or the next tab.

Why this matters

Several JSON-tooling incidents in recent years have shown that paste-to-format sites can log payloads, leak them through ad networks, or pass them through vulnerable parsers. The reference column tracks the incidents and the bugs.

Recommended path

If you treat pasted JSON as confidential, walk the stack in this order.

  • 1. Tool: / — repair invalid JSON locally.
  • 2. Guide: /guides/validate-json-before-api-requests — the local validation workflow.
  • 3. Blog: /blog/sensitive-json-local-tools — what 'local' actually buys you.
  • 4. Reference: /news/online-json-formatter-data-leak — the incident that motivates the local-first design.