Privacy
What you type into a tool is never sent to our servers. The one exception is an AI agent you connect yourself (see AI agents). This page lists everything the site stores on your device.
What leaves your browser
Nothing you type, paste or open in the tools is sent to our servers. The site sends us only a problem report, when you press Send report, an idea or vote on the idea board, a short error note when a script on the page fails (see Error notes), and, if you become a member, your email address (see Membership). If you connect an AI agent to our MCP server, what that agent sends to a tool reaches us too (see AI agents). Ads are served by third parties and load their own content.
What is stored on your device
Every key the site writes, generated from the code. Nothing here is sent anywhere.
| Key | What it holds | Where | How long |
|---|---|---|---|
codeknife-theme | Your theme choice (light or dark) | this browser | until you clear it |
codeknife-contrast | Your contrast choice (standard or high) | this browser | until you clear it |
codeknife-reader | Your text size and dyslexia-friendly letters choice | this browser | until you clear it |
codeknife-guided | Which tool guides you already saw | this browser | until you clear it |
codeknife-adblock-bypass | A flag you can set yourself to skip the ad-blocker check; the site never writes it | this browser | until you clear it |
codeknife-recent | The last tools you opened | this browser | until you clear it |
codeknife-recent-off | Your choice not to keep recently used tools | this browser | until you clear it |
codeknife-pins | The tools you pinned | this browser | until you clear it |
codeknife-code-languages | The code example languages you favorited and picked last | this browser | until you clear it |
codeknife-ideas-voted | The ideas you voted for, so the idea board can show them as voted | this browser | until you clear it |
codeknife-member | Your membership sign-in on this device: a session token and whether the membership is active, until you sign out or clear your stored data | this browser | until you clear it |
codeknife-options:<tool> | The options you chose in one tool, and whether to remember them | this browser | until you clear it |
codeknife-handoff:<id> | Output you send from one tool to another, removed once read | this tab | until you close the tab |
Offline copy
A service worker keeps copies of pages and files in your browser’s cache, in an entry named codeknife- followed by the version, so the site opens without a connection. It holds site files only, never what you type. Old versions are removed automatically; clearing the site data in your browser settings removes the rest.
Ads
Most pages show ads from Google AdSense. Google loads its own script, receives your IP address and browser details, and may set cookies or similar identifiers on your device; see Google’s privacy policy. We don’t control that and don’t receive that data. Pages for sensitive tools (passwords, JWTs, hashes), the home page, this page and the report page load no ad script and show no ads. Members see no ads on any page: their browser loads no ad or consent script. The site also checks for an ad blocker by requesting a bait file from our own server; nothing you typed is included. Visitors in the EU and UK are first asked for consent through Google’s consent tool, which stores your choice in a cookie or similar storage on your device.
Error notes
When a script on the page fails, your browser sends us a short note without asking, at most five per page: the error message, the file it came from, the stack trace, the tool, the page language and path, your browser’s user agent, window size and colour scheme. It never includes what you typed. We keep a count per kind of error, and once the same error keeps happening we open a GitHub issue with these details.
Analytics
We count page views with Cloudflare Web Analytics on pages for non-sensitive tools. It sets no cookies and does not track you across sites. It records the page address, referrer, country, browser and device type, and page load timings, never what you typed. Pages for sensitive tools run no analytics.
Reports
A report contains what the preview shows before you send it. Your input is included only if you switch it on. An email address is optional, is stored encrypted and is used only to tell you when the fix is live; it is deleted as soon as that message is sent, or after 180 days at the latest.
Ideas and votes
An idea contains the title and text you type. It is stored with its language, is public once we have reviewed it, and has no author attached, so keep personal data out of it. A vote is stored as a keyed hash of your IP address and the idea, so one address counts once; these hashes are deleted after 90 days and the vote count stays. The bot check for suggestions is ALTCHA, which we run ourselves and load only when you start a suggestion.
Membership
If you become a member we keep your email address, your plan and when it ends, and the devices you signed in on (with the date each was added). Nothing you type in a tool is ever part of your account. Your email address is stored encrypted and used only to send sign-in links, which work once and expire in 10 minutes. The sign-in form never reveals whether an address has a membership. Payment details go to our payment provider, never to us. Your account and email are deleted 90 days after a membership ends unless you renew, or at any time from the membership page once the membership has ended.
AI agents (MCP)
Our tools run in your browser, but you can also let an AI agent use some of them through our MCP server. This is the one place where input reaches our servers: what the agent sends to a tool is processed in memory to produce the answer, is not stored or logged, and is not linked to your account. It travels over HTTPS. Only tools that don’t handle sensitive data are offered; the hash, password and JWT tools never are. The MCP server is part of the membership and is not available without one. Connecting needs an active membership you are signed in to, and your approval on the consent page; when the membership ends, connected agents stop working. For each connection we keep the agent’s name, the address it returns to and hashed access tokens, until you disconnect it, which you can do at any time from your account page, until 30 days after its last use, or until you delete your account. Calls over your limit are cut, and the agent is told what was left out; we never refuse a call for being over the limit.
Who else is involved
The site runs on Cloudflare, which handles your requests to serve pages and may keep its usual server logs. The bot check in the report dialog is ALTCHA, which we run ourselves and load only when you open the dialog. Reports become GitHub issues, never with your email address, and the fix-live and sign-in emails are sent through Resend. Memberships are paid through our payment provider, which receives your email address and payment details and is the seller of record for tax purposes.
Contact
Use “Report a problem” on any page.