Your payload is not the product.

The converter code is downloaded with the page and executes in your browser. Pasted text and file contents are passed directly to local JavaScript conversion functions. There is no server conversion endpoint, account history, recent-payload feature, or generated result route.

Copy creates a clipboard write on your device. Download creates a temporary in-memory Blob, starts a local browser download, and immediately revokes the temporary object URL. User input is never written into the address bar, query string, or URL fragment.

Vercel Web Analytics is present for pageviews and aggregate product measurement. Custom tool events are deliberately reduced to fixed event names and a small set of non-content properties. The application does not pass input, output, filenames, raw errors, clipboard text, or selected source text.

tool is a stable route identifier. size_bucket is only one of empty, under 1 KB, 1 KB–100 KB, 100 KB–1 MB, or over 1 MB. error_category, preset, and mode are fixed enum values. Raw parser messages never enter analytics.

• Theme: localStorage remembers dark or light mode.
• Auto-convert: localStorage remembers the generic converter toggle.
• Swap: sessionStorage temporarily carries an output to the reverse tool after you choose Swap; the value is removed when read and is not sent over the network.
• Format workspace: nothing persists by default. If you explicitly enable “Remember this workspace,” localStorage stores the JSON input and selected output format. Turning the option off deletes those entries.

You can remove all of these values through browser site-data controls. The site has no application account or server-side conversion history.

Text and spreadsheet file pickers use the browser FileReader API. Files are read into browser memory for the selected operation and are not uploaded by ConvertJSON.io. The workspace enforces a 2 MB local-file guide; individual tools may use a stricter limit.

JWT decoding only displays the token header and payload. Decoding does not verify the signature, issuer, audience, expiry policy, or trustworthiness. Treat bearer tokens as credentials and prefer redacted samples even with local tools.

Vercel hosts the site and may process standard request data such as IP address, user agent, requested route, timestamps, security signals, and performance data under its own service policies. Those infrastructure requests deliver the application; converter payloads are not included in them.

The interface fonts are bundled through the framework and served from this site. The browser does not make a runtime request to Google Fonts. The site does not include advertising or a server-side payload sharing service.

1. Open browser developer tools and select the Network panel.
2. Load a converter, then clear the request list.
3. Paste a unique harmless sentinel, convert it, copy it, and download the output.
4. Confirm no request body, request URL, analytics property, or page address contains the sentinel.
5. Inspect Application → Local Storage to see only the preferences described above unless workspace persistence was enabled.

The repository also includes automated tests that pass a private sentinel through the analytics sanitizer and scan interactive conversion components for payload URL and console logging mechanisms.