Privacy Policy

1. Our Commitment to Privacy

Welcome to the AxelBase JWT Header & Payload Viewer ("the Tool"), a 100% client-side, open-source web application. We believe in absolute privacy — which is why we collect no data, track no users, and store nothing. This Privacy Policy explains how your information is handled when using our Tool.

2. No Data Is Collected

We do not collect, store, or transmit any information from your use of the Tool. Specifically:

  • JWT Tokens: Never sent to servers. Decoded entirely in your browser using atob() and JSON.parse().
  • Personal Data: No names, emails, IP addresses, or device info are recorded.
  • Usage Analytics: No Google Analytics, cookies, localStorage persistence, or tracking pixels.
  • Logs: No server-side logging. The Tool runs statically via GitHub Pages.

Your JWTs remain on your device only. We have zero access to them.

3. How the Tool Operates

The JWT Viewer is a static single-page app built with SvelteKit:

  • Input: You paste a JWT into the textarea.
  • Processing: JavaScript splits, decodes, and parses the token locally.
  • Output: Header and payload are displayed with formatting and copy buttons.
  • Clear: All data is wiped on "Clear" or page refresh.

No network requests are made after initial page load (except Bootstrap CDN for styling).

4. Third-Party Services

We use only one external resource:

  • Bootstrap 5 CDN: For styling. It does not track users or set cookies in this context.

No analytics, ads, or social embeds are included.

5. Cookies & Local Storage

No cookies are used. The Tool is stateless. Temporary data (your JWT) exists only in memory during use and is cleared on refresh.

6. Data Security

Since no data leaves your browser, security is inherent. We recommend:

  • Using the Tool in private/incognito mode for extra caution.
  • Avoiding copy-paste of production secrets into shared environments.
  • Keeping your browser updated.

7. Children's Privacy

The Tool is not directed at children under 13. We do not knowingly collect data from minors.

8. Global Compliance

Because no data is processed, the Tool complies by default with GDPR, CCPA, LGPD, and other privacy laws.

9. Changes to This Policy

We may update this policy. Changes will be reflected here with the new effective date.

10. Contact

For questions, open an issue on our GitHub repository.

Your privacy is non-negotiable. Decode JWTs with confidence — nothing is watched, nothing is saved.