Privacy Policy
Last updated: 5 July 2026
The short version: our tools run in your browser, we do not want your data, and the few cases where information leaves your device are listed openly on this page.
Data processed by our tools
The overwhelming majority of CyberCodeLab tools — formatters, converters, generators, calculators and image tools — run entirely in your browser using JavaScript. Text you paste and images you open are processed locally on your device. They are never uploaded to, or stored on, any server, and we cannot see them.
Tools that contact external services
A small number of network tools must, by their nature, send your query to a public service to work. We disclose this on each tool page as well:
- DNS / MX / TXT Lookup: the domain name you query is sent over encrypted DNS-over-HTTPS to Cloudflare (1.1.1.1) or Google Public DNS.
- IP Address Lookup: the IP address you enter (or your own, if you leave the field empty) is sent to ipwho.is or ipapi.co to retrieve public registration data.
- WHOIS Lookup: the domain you query is sent to the official registry via the public RDAP protocol.
- Password Leak Checker: your password never leaves your browser. It is hashed locally, and only the first 5 characters of the hash are sent to the Have I Been Pwned API (k-anonymity) — the service cannot reconstruct your password from this.
We do not log, store or see any of these queries ourselves — they go directly from your browser to the named services.
Contact form
When you use our contact form, your name, email address and message are delivered to our inbox via FormSubmit, a form-forwarding service. We use this information only to reply to you. It is never added to marketing lists or shared with anyone else.
Advertising and cookies
We display advertising served by Google AdSense to keep every tool and tutorial free. Google and its partners use cookies (including the DoubleClick cookie) to serve ads based on your prior visits to this and other websites.
- You can opt out of personalised advertising at Google Ads Settings.
- Third-party vendors' use of advertising cookies is described in Google's advertising policies.
- Where required by law (for example in the EEA and UK), a consent notice is shown before advertising cookies are set.
Apart from advertising, we set no tracking cookies of our own. Tools do not require cookies to function.
Analytics
We may use aggregate, privacy-respecting analytics (page views, referrers, country-level location) to understand which tools are useful. This data is anonymous and is never used to identify individual visitors.
Hosting and technical data
Our site is served from third-party hosting infrastructure. Like any web host, it receives standard technical data required to deliver pages — your IP address, browser type and requested URL. Fonts and static assets are served from our own domain wherever possible.
Children's privacy
Our content is suitable for a general audience. We do not knowingly collect personal information from children; the only personal data we receive at all is what you choose to send through the contact form.
Your rights
Since we hold essentially no personal data about you, most requests are simple: if you have emailed us and would like that correspondence deleted, ask and we will delete it. Depending on where you live, you may have additional rights (access, correction, erasure) under laws such as the GDPR — contact us and we will honour them.
Changes to this policy
When we change this policy, we update the date at the top of this page. Material changes (such as introducing a new data-collecting feature) will be noted clearly.
Contact
Questions about this policy? Email us at cybercodelab.io@gmail.com or use the contact form.