Privacy Policy

JWT text entered into the decoder is processed in browser memory. The decoder does not send the token to a decoding API and does not intentionally store token contents in localStorage, cookies or the page URL.

Do not paste live production credentials when a synthetic or redacted token can be used instead. Browser extensions, device malware and other software outside this site can still observe content on your device.

Google Analytics loads only after you accept analytics cookies. JWT contents are not intentionally collected as analytics events, URLs or custom dimensions.

Your analytics choice is stored for up to 180 days in the jwtdecoder_tools_cookie_consent cookie with SameSite=Lax and Secure attributes. You can reopen Cookie settings from the site footer.

Advertising and Google services

Google AdSense advertising is not currently enabled on this site.

If advertising is enabled, Google and its advertising partners may use cookies, web beacons, IP addresses and other identifiers to provide, measure and protect advertising.

Before personalized ads are served to users in the EEA, United Kingdom or Switzerland, we will use a Google-certified consent management platform that supports the IAB Transparency and Consent Framework.

Learn how Google uses information from sites and apps that use its services.