Privacy Policy

JWT text entered into the decoder is processed in browser memory. The decoder does not send the token to a decoding API and does not intentionally store token contents in localStorage, cookies or the page URL.

Do not paste live production credentials when a synthetic or redacted token can be used instead. Browser extensions, device malware and other software outside this site can still observe content on your device.

If analytics are enabled later, they must be configured so token contents are not collected as analytics events, URLs or custom dimensions.