Privacy Policy
1. What we do not collect
We do not collect, transmit, store, or process:
- The content you paste into the JSON Formatter
- Any password produced by the Password Generator
- Your name, email address, or any other identifying information
- Account details, since there are no accounts and no sign-up
This follows from how the site is built. There is no server-side application to send the data to, and no database anywhere in the system. The site's Content Security Policy sets connect-src 'none', which means your browser refuses to let our pages make network requests at all. You can check this yourself: open your browser's developer tools, switch to the Network tab, and use a tool. Nothing carrying your data will appear.
2. What our hosting provider necessarily sees
The site is hosted on Cloudflare Pages. To deliver a web page at all, Cloudflare has to receive and process the ordinary information every web request carries:
- Your IP address
- Your browser's user-agent string
- The page you requested and when
- The country your request originates from, derived from your IP address
We do not use any of it. The site used to redirect visitors from Thailand to the Thai home page; it no longer does. Choosing a language now happens entirely in your browser, from the language preference your browser already sends, and nothing about that choice reaches a server.
Cloudflare retains standard request logs under its own privacy terms. We do not export, analyse, or retain those logs. See Cloudflare's Privacy Policy.
“Zero Server Data” refers to the content you work with, which never reaches a server. Your IP address still reaches Cloudflare, the same as it would on any website.
3. Cookies and local storage
The tools use no cookies. Nothing on this site writes a cookie today.
We store exactly one value in your browser's localStorage: whether you accepted or declined the advertising notice. It is stored under the key lu.consent.ads and holds the single word granted or denied. It never leaves your browser, contains nothing about you, and you can erase it at any time by clearing site data in your browser settings.
We use localStorage rather than a cookie because a cookie would be sent to the server with every request, and this value does not need to go anywhere.
4. Analytics
We currently run no analytics: no Google Analytics, no tracking pixels, no session recording, no fingerprinting.
If we add analytics later, we will update this page first, and any such tool will load only after you have given consent.
5. Advertising
No advertisements are currently served on this site. The page layout reserves space for them so that adding them later does not cause the page to shift under you, but no advertising code is loaded today.
We intend to serve advertising through Google AdSense to keep LightUtils free. When that happens:
- Google and its partners may use cookies to serve ads based on your prior visits to this and other websites.
- You will be asked for consent first, and advertising code will not load unless you accept.
- This page will be updated before any advertising code goes live.
You can opt out of personalised advertising at any time through Google's Ads Settings, or for participating vendors at aboutads.info/choices. Google's own handling of data is described in How Google uses information from sites that use its services.
There is a trade-off in this. Third-party ad code will require us to relax the strict security policy described in section 1. That is the cost of keeping the site free, and it is why advertising is gated behind your consent rather than switched on quietly.
6. Third parties
Today this site loads no third-party scripts, fonts, images, or frames. Everything it serves comes from its own domain. The only third party involved is Cloudflare, as our host, described in section 2.
7. Your rights
Data-protection laws including the EU/UK GDPR and Thailand's Personal Data Protection Act (PDPA) give you rights over your personal data: to access it, correct it, delete it, or object to its processing.
We hold no personal data about you, so in practice there is nothing for us to retrieve or erase on request. The one value this site stores sits in your own browser and is under your control: clear your browser's site data and it is gone. For the request logs held by Cloudflare as our hosting provider, please refer to Cloudflare's own policy linked in section 2.
8. Children
This site is a general-purpose developer utility and is not directed at children. We do not knowingly collect information from anyone, of any age.
9. Changes to this policy
We will update this page when the site's behaviour changes, before the change takes effect. The date at the top is the most recent revision.
10. Who operates this site
LightUtils is a product of CODENIVERSE (บริษัท โค้ดนิเวิร์ส จำกัด), a digital technology agency in Thailand. CODENIVERSE is the data controller for the purposes of the GDPR and Thailand's PDPA.
11. Contact
For questions about this policy, contact privacy@lightutils.com.