Privacy
unstringify.com is local-first. What you paste, drop or open stays in the tab you opened it in. Everything below is checkable against your own network tab, which is why it is written as a list of facts rather than as a policy.
Where your data goes
- Reading, fixing, comparing, searching, converting — this tab. No request is made.
- Your open files and recents — this browser’s storage. Never synced.
- Share links — the URL itself. Browsers never send the part after
#. - Analytics — none. No session recording, no third-party scripts.
What we store
- localStorage: your preferences, your shortcut map, and the metadata for your open tabs and recents. A few hundred kilobytes at most.
- IndexedDB: the body of any document over 256 KB, so a large file does not blow the localStorage quota. Stored under this origin only.
- Cookies: none. There is no account to keep you signed in to.
Preferences → Privacy measures all of it and clears it row by row, and “Erase everything” removes the lot.
What we never collect
- Analytics, tracking pixels, fingerprinting, or session replay.
- Third-party scripts of any kind. The code editor (Monaco) is bundled into the build and served from unstringify.com like every other script on the page; it used to come from
cdn.jsdelivr.netand no longer does. - Font requests.
next/fontdownloads JetBrains Mono and Bricolage Grotesque at build time and serves them from unstringify.com, so your browser never asks Google for either. - Your data. Your JSON, YAML, XML, CSV and logs stay on your device.
Share links
A share link packs the document itself — compressed — into the URL fragment, the part after #. Browsers never send fragments in HTTP requests, so the shared data reaches no server: not ours, not our host’s. It travels only inside the link you choose to send, and is decoded entirely in the recipient’s browser.
Contact
Questions, or something on this page you can disprove: hello@unstringify.com. The terms of use are one page and just as short.
Last updated: 2026-09-05.