Privacy Policy

Last updated: 24 May 2026

Short version: Pretty JSON & XML runs entirely in your browser. Your JSON and XML data is never sent to any server, never logged, and never stored anywhere except your own computer.

What we don't collect

We do not collect, store, transmit, or log any of the content you paste into the editor or upload as a file. The viewer is a single HTML file that parses and renders everything client-side using your browser's built-in JavaScript engine. There is no backend, no API, no upload endpoint. We literally cannot see your data even if we wanted to.

Specifically, the following never leaves your device:

JSON or XML you paste into the editor
Files you upload via the Upload button or drag-and-drop
Text you type into the editor
Search queries you enter into the search box
Which rows you expand or which columns you sort

What we do load (third-party analytics)

To understand whether the site is reaching anyone and which features are useful, we load three analytics scripts after the page has finished loading:

Google Analytics 4 (googletagmanager.com) — aggregate pageview counts, country, device type, and a small set of custom events we fire when you click Format, Minify, View as Table, etc. IP addresses are anonymized.
Microsoft Clarity (clarity.ms) — session recordings and heatmaps for UX research. The editor, viewer, and path bar are tagged with data-clarity-mask="true", which means Clarity records the page layout but never records the text content of your data. We see where you click, not what you paste.
Cloudflare Web Analytics (cloudflareinsights.com) — cookieless, GDPR-friendly server-side aggregate stats.

All three are deferred until after the page is interactive, and all three are skipped entirely if you're running the site on localhost.

Cookies and local storage

The site itself uses localStorage for one thing only: remembering your theme preference (light vs dark). Google Analytics and Microsoft Clarity may set their own cookies for visitor identification. None of these touch the data you paste.

Your rights (GDPR, CCPA)

Because we never store any personal data from you on our servers, there's nothing to delete, export, or rectify. If you want to opt out of analytics, you can:

Block JavaScript from googletagmanager.com, clarity.ms, and cloudflareinsights.com via your browser or an extension like uBlock Origin
Use Do Not Track in your browser (we honor it as a signal to skip personalization, though all analytics here are already aggregated)
Use the site in a Private/Incognito window — analytics cookies are cleared when you close it

Contact

If you have a question about privacy, find a security issue, or want a feature changed, email aleksandre.mtchedlishvili@gmail.com.

Changes to this policy

If we change what we collect or load, we update this page and bump the "Last updated" date at the top. We'll never silently start collecting more.