Privacy Policy

About our Privacy Policy

Your privacy is important to us. It is JSON Fast's policy to respect your privacy regarding any information we may collect from you on the JSON Fast website.

We only request personal information when we truly need it to provide you with a service. We do so by fair and lawful means, with your knowledge and consent. We also let you know why we are collecting it and how it will be used.

We only retain the collected information for as long as necessary to provide the requested service. When we store data, we protect it within commercially acceptable means to prevent loss and theft, as well as unauthorized access, disclosure, copying, use, or modification.

We do not sell your personal data to third parties. We share browsing data only with the analytics and security partners listed in this Policy, always for the stated purpose and under the corresponding legal basis.

Our website may contain links to external sites that are not operated by us. Please be aware that we have no control over the content and practices of these sites, and cannot accept responsibility for their respective privacy policies.

Our Tools Run in Your Browser

All tools offered on JSON Fast (the JSON formatter and validator, the JSON minifier, the JSON diff tool, the JWT decoder, the JWT encoder, the XML to JSON converter, the JSON to XML converter, the JSON to Base64 encoder, the Base64 to JSON decoder, the JSON to YAML converter, the YAML to JSON converter, the CSV to JSON converter, and the JSON to CSV converter) run 100% in your browser. The content you paste, load from a file, or process in them, including JSON, XML, YAML, CSV, and Base64 data, JSON Web Tokens, and signing secrets, is handled locally on your device and is never sent, transmitted, or stored on our servers. A file you choose in the CSV to JSON converter is read by your browser and is not uploaded. We have no access to the data you process in the tools.

If you load JSON from a URL, your browser requests it directly from that address. We do not proxy that request and never see or store the URL or its content. The third-party site receives your request as it would any other visit, and its own privacy practices apply.

The formatter's processing history is kept only in your own browser's session memory (sessionStorage) and is automatically cleared when you close the tab. Your usage preferences (the selected JSON specification and indentation) are stored locally in your browser (localStorage). Tokens, claims, and secrets entered in the JWT decoder or the JWT encoder are never written to browser storage. None of this data leaves your device or reaches us.

Data Collected Directly

Contact form: we collect the user's name, email, message, and IP address. This data is used exclusively to respond to your request and for operational security purposes. Messages are forwarded for internal processing via Slack, are not stored in a database on the site, and are not sold or shared with third parties.

Legal Basis for Processing

All collection and use of data on this site has a legal basis defined under the Brazilian General Data Protection Law (Law No. 13.709/2018, Art. 7), and, for users in the European Economic Area, under the European Union General Data Protection Regulation (GDPR, Regulation (EU) 2016/679, Art. 6).

Processing based on Consent

Where required by applicable law, the user expressly agrees to the processing before it begins. You may withdraw your consent at any time by adjusting your browser settings to block or remove cookies.

Processing based on Legitimate Interest

Necessary for the secure and proper operation of the service:

Contact form: name, email, message, and IP collected to respond to the user's request.

Browsing analytics via Google Analytics and Hotjar, to understand how the site is used and improve the experience.

Security logs and IP records to protect against abuse and misuse of the service.

Security and WAF via Cloudflare to protect the service against attacks and malicious traffic.

Performance monitoring via New Relic, to maintain the quality and availability of the service.

Cookie Policy

What are cookies?

As is common practice with almost all professional websites, this site uses cookies, which are small files downloaded to your computer, to improve your experience. We also explain how you can prevent these cookies from being stored; however, this may downgrade or "break" certain elements of the site's functionality.

How do we use cookies?

We use cookies for a variety of reasons, detailed below. Unfortunately, in most cases, there are no industry-standard options for disabling cookies without completely disabling the functionality and features they add to this site. It is recommended that you leave all cookies on if you are not sure whether you need them or not, in case they are used to provide a service you use.

Disabling cookies

You can prevent the setting of cookies by adjusting your browser settings (see your browser's help for how to do this). Be aware that disabling cookies will affect the functionality of this and many other sites that you visit. Disabling cookies will usually result in also disabling certain functionality and features of this site.

Types of cookies we use

Session cookies: active only while you browse the site and automatically removed when you close the browser.

Persistent cookies: stored until you delete them manually or the expiration date passes. They are used by analytics and security partners to recognize your browser between visits.

Third-Party Cookies

In some special cases, we also use cookies provided by trusted third parties. The following section details which third-party cookies you might encounter through this site.

This site uses Google Analytics, which is one of the most widespread and trusted analytics solutions on the web, to help us understand how you use the site and how we can improve your experience. These cookies may track things like how long you spend on the site and the pages you visit, so we can continue producing engaging content. For more information about Google Analytics cookies, please refer to the official Google Analytics page.

This site uses Hotjar, an analytics tool to help us understand how you use the site and how we can improve your experience. These cookies map how people use the site so that we can constantly improve it. Information such as Hotjar ID, country of access, date of access, type of device used, operating system, time of access, how the site is used, and browser used is collected by Hotjar, but it is not possible to identify who you are. We do not use this data to try to identify you, but to improve the experience of our users. For more information about Hotjar cookies, please refer to the official Hotjar page.

This site uses Cloudflare. Cloudflare helps us make our site faster and more secure. It provides web optimizations, as well as security services such as DDoS protection and a web application firewall (WAF). It also includes a reverse proxy and a content delivery network (CDN). Cloudflare blocks threats and limits abusive bots and crawlers that waste our bandwidth and server resources. The Cloudflare cookie is used primarily to identify specific clients behind a shared IP address and to apply security settings for each client individually. For more information about Cloudflare cookies, please refer to the official Cloudflare page.

This site uses New Relic. Through New Relic, we collect information related to how the site is used, such as loading times, system errors, and other metrics essential for maintaining the quality of the service. This information is used exclusively for monitoring purposes and to improve the browsing experience. For more information about New Relic, please refer to the official New Relic page.

This site uses Slack to receive and process the messages sent through the contact form, as well as internal operational alerts. The data transmitted by the contact form (name, email, message, and IP) is used exclusively to respond to your request and for operational security purposes, and is not shared publicly or used for commercial purposes. For more information about Slack, please refer to the official Slack page.

International Data Transfer

Some of the services used process data on servers located outside Brazil. These transfers are carried out based on internationally recognized standard contractual clauses, in accordance with Art. 33 of the LGPD and Arts. 44 to 49 of the GDPR:

Google LLC: servers in the United States. Purpose: browsing analytics and page typography (Google Fonts).

Hotjar Ltd: servers in the United States and Ireland. Purpose: user behavior analysis.

Slack Technologies: servers in the United States. Purpose: receiving contact messages and operational alerts.

New Relic Inc.: servers in the United States. Purpose: service performance monitoring.

Cloudflare Inc.: servers in the United States. Purpose: security, WAF, and content delivery.

By browsing this site or sending a message through the contact form, you acknowledge this transfer under the terms of this Policy.

About Changes to this Policy

JSON Fast reserves the right to change this Privacy Policy at any time, without prior notice, updating the content according to the needs of the service, technological improvements, or new features. We recommend that you review this policy regularly to stay up to date.

User Commitment

The user agrees to make proper use of the content and information that JSON Fast offers on the site. Any misuse of the content provided here is the sole responsibility of the user.

Contact

To exercise your data subject rights or to clarify any questions about this Privacy Policy, please get in touch with us through our contact page.

Last updated: October 13, 2026