Privacy Policy
Last updated: May 1, 2026
1. Who we are
iKit (the "Service", "we", "us") is a free online utility that lets you format, minify, validate, and visualize JSON data. This Privacy Policy explains how we handle personal data in accordance with the EU General Data Protection Regulation 2016/679 ("GDPR") and the ePrivacy Directive 2002/58/EC.
2. The data you provide in the tool stays with you
The JSON you paste, upload, or drop into the tool is processed entirely inside your browser. It is never uploaded to our servers, logged, stored, or shared with third parties. If you close the tab, the data is gone.
3. Information we collect automatically
When you visit the Service, our server and any third-party providers we use may receive:
- Your IP address and approximate location (city/country level) — used only for security, abuse prevention, and aggregate traffic analysis.
- Your browser user-agent, device type, and referring URL.
- Standard web-server access logs, retained for up to 30 days.
The legal basis for this limited processing is our legitimate interest (Art. 6(1)(f) GDPR) in operating and securing the Service. We do not use this data to identify you personally.
4. Cookies and similar technologies
We use a minimal number of cookies, grouped as follows:
| Name | Purpose | Type | Retention |
|---|---|---|---|
locale | Remembers your language choice | Essential (functional) | 12 months |
consent | Stores your cookie consent preferences | Essential | 12 months |
XSRF-TOKEN, jsondecoder_session | CSRF protection and session | Essential | 2 hours |
Google AdSense cookies (_gads, _gac_*, IDE, etc.) | Show personalised or non-personalised advertisements and measure their performance | Advertising (consent required in the EEA/UK) | Up to 24 months |
Essential cookies are required for the Service to function and do not require consent. Advertising cookies are only set after you give consent via our cookie banner; you can withdraw consent at any time by clicking "Cookie settings" in the footer.
5. Third-party services
Google AdSense
We display advertisements through Google AdSense (provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When you consent to advertising cookies, Google may use identifiers to show personalised ads and measure their effectiveness. Google is an independent controller of the data it collects through AdSense.
Learn more: How Google uses information from sites or apps that use our services.
Bunny Fonts
Web fonts are loaded from fonts.bunny.net, a privacy-friendly font CDN operated by BunnyWay d.o.o. (EU, Slovenia). Bunny Fonts does not log IP addresses or set cookies.
6. International transfers
Google AdSense may transfer data outside the EEA. Google relies on the EU-US Data Privacy Framework and Standard Contractual Clauses to ensure an equivalent level of protection. No other transfers take place.
7. Your rights under the GDPR
You have the right to:
- access the personal data we hold about you (Art. 15);
- rectify inaccurate data (Art. 16);
- request erasure (Art. 17);
- restrict or object to processing (Art. 18, 21);
- data portability (Art. 20);
- withdraw consent at any time, without affecting the lawfulness of earlier processing;
- lodge a complaint with your national supervisory authority (see the list of EU authorities at edpb.europa.eu).
8. Children
The Service is not directed at children under 16. If you believe a child has provided us with personal data, please contact us so we can delete it.
9. Security
We apply appropriate technical and organisational measures (HTTPS, up-to-date dependencies, principle of least privilege). No method of transmission over the Internet is 100% secure.
10. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be announced on this page with a new "last updated" date.
11. Contact
For any privacy question or to exercise your rights, contact us at [email protected].