Privacy Policy
Last updated: October 21, 2025
TL;DR - The Good News
We don't collect, store, or transmit any of your data. Period.
All tools run 100% locally in your browser. Nothing you enter ever leaves your device. We have no servers to receive your data, no databases to store it, and no analytics to track you.
One exception: The Domain Checker tool sends domain queries to external DNS services to check availability. This is technically necessary since browsers can't query DNS directly. No other data is transmitted.
How It Works
Boring Developer Tools is built as a client-side application. This means:
- All processing happens in your browser - When you use any tool, your data is processed entirely on your device using JavaScript.
- No server communication - We don't send your data to any servers for processing or storage (except the Domain Checker, which must query DNS servers to check availability).
- Works offline - Once loaded, the app works without an internet connection, proving nothing is being transmitted (Domain Checker requires internet, obviously).
- No user accounts - No sign-ups, no logins, no user tracking across sessions.
What We Don't Collect
Unlike most web applications, we explicitly do NOT collect:
- Your IP address
- Browser fingerprints or device information
- Any data you enter into our tools (JWT tokens, API keys, JSON data, etc.)
- Usage analytics or behavior tracking
- Cookies for tracking purposes
- Personal information of any kind
- Location data
- Search queries or tool preferences
Technical Details
For the technically curious, here's how we ensure your privacy:
Client-Side Processing
All tools are implemented using JavaScript that runs entirely in your browser. You can verify this by:
- Opening your browser's network tab - you'll see no API calls when using most tools
- Disconnecting from the internet - the app continues to work (except Domain Checker, which needs DNS)
- Reviewing our source code (working on making it public - stay tuned!)
Domain Checker Exception: The Domain Checker tool is the only one that makes external requests. It queries DNS servers and domain registries to check if domains are available. This is technically necessary because browsers don't have direct DNS query capabilities. However, these queries only contain the domain names you're checking - no personal data, no tracking.
No Analytics
We don't use Google Analytics, Mixpanel, Segment, or any other analytics service. We have no idea who uses our tools or how they use them - and we like it that way.
Local Storage
We may use browser localStorage to save your preferences (like theme selection or recent tools). This data never leaves your browser and can be cleared at any time through your browser settings.
Cookies
We only use strictly necessary cookies to make the site function (e.g., theme preference). No third-party cookies. No tracking cookies.
Third-Party Services
The only external connections made are:
- Static Hosting - The website is served from a CDN/hosting provider, but they don't have access to what you do within the app.
- DNS Queries - The Domain Checker tool may query DNS servers to check domain availability, but this is done directly from your browser.
We don't integrate any third-party scripts, widgets, or tracking pixels.
Data Security
Since we don't collect or store your data, there's nothing to secure on our end. Your data's security is entirely in your hands - it never leaves your device.
However, we still follow security best practices:
- HTTPS encryption for all connections
- Content Security Policy headers to prevent XSS attacks
- Regular security updates to dependencies
- No inline scripts or unsafe-eval directives
Open Source
Plot twist: We're currently in stealth mode with a private repository, but we're planning to open-source the entire codebase soon™. (That's "soon" in developer time, so anywhere between next week and next year. We're optimistic though!)
Once we go public, you'll be able to:
- Audit every single line of code to verify our privacy claims (we have nothing to hide!)
- Run the application locally on your own machine (great for paranoid developers and air-gapped environments)
- Fork and modify it for your own use (make it yours!)
- Contribute improvements back to the project (we'd love that!)
- Report security issues or privacy concerns (please do!)
In the meantime, you can still verify our privacy claims by checking your browser's network tab while using the tools. Spoiler alert: You won't see anything interesting (except for Domain Checker DNS queries).
Children's Privacy
We don't knowingly collect information from anyone, including children under 13. Since we don't collect any personal information at all, COPPA compliance is inherent to our design.
Your Rights
Under GDPR, CCPA, and similar privacy regulations, you have rights regarding your personal data. Since we don't collect any personal data, there's nothing for us to:
- Access or provide to you
- Correct or update
- Delete or erase
- Export or port
- Object to processing of
Your data stays in your browser, under your complete control.
Changes to This Policy
If we ever change our privacy practices (spoiler: we won't start collecting data), we'll update this page with a new "Last updated" date. Given our architecture, any fundamental changes would require a complete redesign of the application.
Contact
If you have questions about this privacy policy or our practices, you can reach us at:
- Email: [email protected]
- GitHub: github.com/boringdevtools
The Philosophy
We built Boring Developer Tools with privacy as a core principle, not an afterthought. We believe that:
- Developer tools often handle sensitive data (API keys, tokens, production configurations)
- You shouldn't have to trust a third-party service with this data
- Client-side processing is more secure and privacy-friendly
- We don't need your data to provide value
Privacy isn't just a policy for us - it's the architecture of the application.
Questions?
Still have concerns about privacy? Check the network tab in your browser's dev tools while using our tools - you'll see zero API calls to our servers (except Domain Checker querying DNS).
Or wait for us to open-source the code and audit every line yourself. Coming soon!