PRIVACY · 2026-08-20
Privacy statement
DevBox is a local toolbox that runs in the browser. This page tells usWillandNoWhat to do with your data. Effective date: August 20, 2026.
1. Core Principle: Your content never leaves this computer
JSON Formatting, verification, conversion, encoding and decoding, hashing, JWT, RSA, text processing, image compression, QR code, etc. are all calculated using JavaScript in the current browser.We do not have a backend to receive, store or analyze the content you paste.The text, keys, tokens, and images you paste into the editor will not be submitted to our server as "user data" by default.
2. Settings saved on this machine
In order to remember preferences, the site will write a small amount of configuration in the browserlocalStorage, including:
- Theme (Light/Dark)
- Number of spaces for editor indentation
- Editor font size
This data only exists on your device. It will be lost after changing browsers, clearing site data or in incognito mode and needs to be reset. We can't read localStorage on your computer.
3. How sharing links work
When you click "Share", the current tool and input will be encoded into Hash(#tool=…&data=…). Hash will not be sent to the server with ordinary page requests. Send the complete URL to others, and they will open it inhis own browserRestore the contents.
Please note: Once the link is sent, anyone who gets the link can see the data inside. Do not use the sharing function to pass keys, production tokens, or real privacy. Oversized text is also subject to browser URL length restrictions.
4. You will actively initiate network requests
The following situations will access the network and only occur when you explicitly do so:
- Pull JSON from URL: After clicking "Pull" in the workspace, the browser will send a request to the address you filled in. Please confirm that the source is trustworthy first.
- Load this site and dependencies: When the page is opened, the browser will request the static files of this site, as well as fonts, styles and some open source libraries (such as json5, js-yaml, etc. on Google Fonts, jsDelivr). these requestsNot includedWhat you paste in the editor.
5. What we don’t do
- No account, login or user portrait
- Does not use ad tracking cookies or sell data to ad networks
- Do not report keys, JSON, and pictures as logs
- You are not required to provide your name, email or mobile phone number to use the tool
6. Sensitive data reminder
Even if the calculation occurs locally, paste the production environment key, customer privacy, and unpublished interfaces intoanyWeb pages still have risks: screen sharing, browser extensions, device theft, and misplaced sharing can all lead to leaks. When it comes to real privacy, please use offline or intranet tools.
"Simple JS Run" executes the script you enter in an isolated iframe. Do not paste untrusted code.
7. Third-party services
Fonts and some scripts are distributed by a third-party CDN. These services may record general access logs such as IP, User-Agent, etc., which are subject to their respective privacy policies. DevBox There is no control over these logs.
8. Changes
If there are substantial changes in the handling methods, we will update this page and revise the date at the beginning of the article. By continuing to use you will be deemed to be aware of the latest instructions.