Privacy Policy
Last updated: January 2026
1. Overview
ViewJSON ("we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our Service.
2. Information We Collect
2.1 Local Storage (Client-Side Only)
We use browser localStorage and IndexedDB to store:
- Your JSON editing history (stored locally on your device only)
- User preferences (sidebar state, settings)
- Warning acknowledgments
This data is stored only on your device and is not transmitted to our servers.
2.2 Account Information
If you sign in with Google or GitHub, we collect:
- Email address
- Profile picture
- Display name
- Username (GitHub only)
2.3 Shared Links (End-to-End Encryption)
When you generate a shareable link:
- Your JSON data and configured variables are encrypted locally in your browser using AES-GCM before any network transmission.
- Only the encrypted, unreadable binary ciphertext is uploaded to our edge servers (Cloudflare) to generate a short URL.
-
The decryption key is embedded solely in the URL hash fragment
(
#), which browsers never transmit to servers per the HTTP specification. - We have zero knowledge of your shared content: we cannot read, decrypt, monitor, or recover your data under any circumstances.
Shared link ciphertext is stored on Cloudflare's edge network and may be automatically purged after a retention period. Since we do not hold the decryption key, expired data is irrecoverable.
2.4 Cloud Storage (Future Feature)
When cloud storage is enabled, we may store:
- JSON content you choose to save
- Associated metadata (creation date, last modified)
2.5 Analytics (Future)
We may use analytics services (such as Google Analytics) to collect:
- Anonymous usage data
- Page views and interactions
- Device and browser information
3. How We Use Information
- To provide and improve the Service
- To authenticate users
- To store your data for cloud sync features
- To analyze usage patterns and improve user experience
4. Third-Party Services
We use the following third-party services:
- Google Fonts: For typography
- Google Sign-In: For authentication
- GitHub: For authentication
- Cloudflare: For hosting, CDN, and encrypted ciphertext storage for shared links
These services may collect their own data according to their privacy policies.
5. Data Security
For shared links, we employ client-side AES-GCM encryption. Our servers store only encrypted ciphertext and never receive the decryption key. This means that even in the event of a server breach, your shared data remains cryptographically protected.
For other aspects of the Service, we use industry-standard security measures. However, no method of transmission over the Internet is 100% secure.
6. Data Retention
Local storage data remains on your device until you clear it. Cloud-stored data is retained until you delete it or your account.
7. Your Rights
You have the right to:
- Access your personal data
- Request deletion of your data
- Clear your local storage at any time
8. Children's Privacy
The Service is not intended for children under 13. We do not knowingly collect information from children under 13.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page.
10. Contact
For questions about this Privacy Policy, please contact us at support@viewjson.net.