Legal

Privacy Policy

OpenFormatter is built on a Zero-Trust privacy model. Your data never leaves your browser.

verified_userPrivacy-First Architecture

The core formatting functionality of OpenFormatter processes all data 100% client-side. No input data is ever transmitted to our servers. This is a technical guarantee, not just a policy.

1. Data Collection

OpenFormatter does not collect, store, or transmit any data you input into our formatting tools. All processing occurs exclusively within your browser using client-side JavaScript and WebAssembly. We have no technical ability to access your input data.

For account features (sign-in, saved favorites), we collect: - Email address - Encrypted password hash (bcrypt) - Usage analytics (aggregated, non-personally identifiable)

OpenFormatter is currently free, and we do not collect or process any payment information. If we introduce paid add-ons in the future, we'll disclose the payment processor here before that happens.

2. Local Storage

We use browser localStorage to store: - Theme preferences (light/dark mode) - Recent tool history (last 10 operations, stored encrypted) - Editor preferences (indentation, formatting rules)

This data never leaves your device and can be cleared at any time through your browser settings.

3. Cookies

We use cookies and similar technologies for: - Authentication sessions (httpOnly, secure, sameSite=lax) - CSRF protection - Site analytics and advertising, set by Google Analytics, Yandex Metrika, and Google AdSense (see Section 4)

None of these cookies can see the data you paste into our formatting tools — that data is never transmitted anywhere. They only see standard page-visit and click activity, like which pages you view and which links you click.

4. Third-Party Services

We use the following third-party services: - Google Analytics: Aggregated site usage analytics (pages visited, general location, device type). - Yandex Metrika: Site usage analytics, including session recording (Webvisor) and click tracking (Clickmap), to understand how visitors use the site. - Google AdSense: Displays ads on the site and may set advertising cookies. - Vercel: Hosting infrastructure. Server logs are retained for 30 days. - Google Fonts: Space Grotesk, Inter, and DM Mono are served via Google Fonts CDN. Material Symbols icons are self-hosted and make no external request.

These services track how you navigate and interact with our pages — never what you paste, type, or process inside a formatting tool. That input data stays exclusively in your browser and is never sent to us or to any of these services.

5. Your Rights (GDPR/CCPA)

You have the right to: - Access all data we hold about you - Request deletion of your account and associated data - Export your data in JSON format - Opt out of any future communications

To exercise these rights, email privacy@openformatter.com with subject "Data Request".

6. Security

Our security measures include: - All data in transit encrypted with TLS 1.3 - Passwords hashed with bcrypt (cost factor 10) - JWT authentication tokens with short expiry (24 hours)

7. Changes to This Policy

We will notify registered users via email of any material changes to this privacy policy at least 14 days before they take effect. Continued use of OpenFormatter after that date constitutes acceptance of the updated policy.

Last updated: August 2026