Privacy Policy

1. Data you process with the tools

The tools on YamlBox perform their work locally using JavaScript that your browser has already downloaded. The text and files you provide are processed in memory in your browser tab and are not transmitted to our servers — because there are no application servers that receive them. Closing the tab discards the data.

Practical consequences: you can use the tools with production secrets, customer exports and unreleased content, subject to your own organisation’s policies; you can verify the claim with your browser’s network inspector; and the tools continue to work when you are offline.

2. Share links

The “Share” button embeds your input in the URL fragment of a link (?input=…) so a colleague sees the same state. That link is created entirely in your browser and copied to your clipboard — it is only transmitted if you choose to send it, and only to whoever you send it to. Do not share links whose input contains secrets.

3. Server logs and hosting

The site is served as static files by Cloudflare Pages. Like most hosting providers, Cloudflare processes standard request data (such as IP address, user agent, and the URL requested) to deliver content, protect against abuse and produce aggregate traffic statistics. This is infrastructure-level data about page requests — it never includes the content you paste into a tool, which is not part of any HTTP request. See Cloudflare’s privacy documentation for details.

4. Cookies and local storage

• No tracking cookies. We do not use advertising, analytics or social-media cookies.
• One functional local-storage key. Your light/dark theme preference is stored in your browser under yb-theme. It never leaves your device, and clearing site data removes it.

5. Analytics

This site does not run third-party analytics scripts on tool pages, precisely so that no analytics payload can ever be adjacent to your input. Aggregate traffic numbers, where used, come from the hosting provider’s infrastructure statistics described in section 3, not from client-side tracking.

6. Email you send us

If you email hello@yamlbox.com, we receive your address and message. We keep it to answer you and improve the tools, and we do not add you to any marketing list. Ask us to delete the thread at any time.

7. Children

The Service is a developer utility and is not directed at children under 16. We do not knowingly collect personal data from children.

8. Your rights

Under the GDPR and comparable laws you have rights of access, rectification, erasure, restriction, portability and objection regarding personal data we hold. Because we hold almost nothing — only email you may have sent — a request is usually answered within a few days. Contact hello@yamlbox.com.

9. Changes to this policy

If the data practices ever change, this page will be updated first and the “last updated” date revised. The core commitment — client-side processing, no uploads — is architectural and is not planned to change.