Privacy Policy

Overview

jwtdecoded.com ("we", "us", "the site") is a free JSON Web Token inspection utility and learning resource. We take your privacy seriously and have designed the site to collect as little information as possible. This policy explains exactly what is collected when you use the site, why, and the choices you have. If anything here is unclear, you can reach us through the contact page.

JWT tokens you paste (the important one)

All JWT decoding happens entirely in your browser using JavaScript on your own device. Tokens you paste into the decoder are never transmitted to any server, never logged, and never stored by us. There is no network request when you decode a token — we have no technical ability to read the tokens you inspect. This is the core privacy guarantee of the site, and it is why the decoder is safe to use with real production tokens.

Information collected automatically

Like most websites, our hosting provider and the third-party services below may automatically receive standard technical information when you visit, such as your IP address, browser type, device type, referring page, and the pages you view. This information is used to operate the site securely and to understand aggregate usage. It is not used to identify you personally.

Analytics

We use PostHog to collect anonymous, aggregate usage analytics — which pages are visited, general interaction patterns, and approximate geographic region. We use this only to understand which guides are useful and where the tool can be improved. We do not use analytics to build advertising profiles, and the tokens you decode are never included in any analytics event.

Advertising and Google AdSense

To keep the site free, we display advertising through Google AdSense. The following applies to ads served on this site:

• Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites.
• Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the internet.
• You may opt out of personalised advertising by visiting Google Ads Settings.
• You can also opt out of a third-party vendor's use of cookies for personalised advertising at aboutads.info.

For more information on how Google uses data when you use our partners' sites or apps, see Google's privacy & terms. Advertising scripts run independently of the decoder and never have access to the tokens you paste.

Cookies

This site itself does not set first-party cookies for tracking. Cookies and similar technologies may be set by the third-party services described above (PostHog and Google AdSense). Most browsers let you refuse or delete cookies through their settings; doing so will not affect the core functionality of the decoder, which runs entirely client-side.

Your choices and rights

Depending on where you live, you may have rights over personal data relating to you, including the right to access, correct, or delete it, and to object to certain processing. Because we do not collect personal accounts or directly identifiable profiles, the most effective controls are: opting out of personalised ads via the links above, and managing or clearing cookies in your browser. For any request or question about your data, contact us through the contact page.

Children's privacy

This site is intended for developers and is not directed at children under 13. We do not knowingly collect personal information from children.

Third-party links

This site links to external resources such as RFC specifications and library repositories. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policy of any site you visit.

Changes to this policy

We may update this privacy policy from time to time to reflect changes to the site or to legal requirements. When we do, we will revise the "last updated" date at the top of this page. Significant changes will be made clear on this page.

Contact

If you have any questions about this privacy policy or how your data is handled, please reach out via the contact page.