Privacy Policy
Short version: this site does not track you, and its tools do not send your data anywhere.
What do the tools do with what I paste?
Nothing leaves your browser. The JWT Decoder, PKCE Generator, SAML Decoder, Authorization URL Builder and Security Header Builder are JavaScript programs that run on your device. Tokens, secrets, assertions and settings you enter are processed in the page and are not uploaded, logged or stored on any server. The PKCE Generator keeps your last generated values in your browser's session storage so the URL builder can reuse them; that storage is cleared when you close the tab.
Cookies and analytics
The site sets no cookies and uses no analytics, advertising, tracking pixels or third-party scripts. Fonts are served from this site.
Hosting
The site is served by Cloudflare. Like any web host, Cloudflare processes standard request data (such as IP address, user agent and requested URL) to deliver pages and protect against abuse. See Cloudflare's own privacy policy for details.
If you email contact@twobotechnologies.com, your message and address are used only to reply and are not added to any list or shared.
External links
Some pages link to external sources such as RFCs, specifications and vendor documentation, and the home page links to searches on x.com. Those sites have their own privacy practices.
Changes and contact
If this policy changes, the date above changes. Questions: contact@twobotechnologies.com.