Privacy, in plain English

Short version: no trackers, no ads, no accounts, no cookies. We don't collect anything about you.

Last updated:

No tracking

No analytics, ad pixels or fingerprinting scripts.

No cookies

The site doesn't set any.

Stays on your device

The few settings we save live only in your own browser.

The tools run in your browser

Everything on the Tools page runs locally, inside your browser tab:

  • Hash & encode playground: Base64 and SHA-256 are computed with your browser's built-in Web Crypto API.
  • Password checker: what you type is never sent over the internet, never saved and never logged. We still suggest testing a password that is similar to yours rather than the real one.
  • IAM policy explainer: the policy is parsed in your browser and never uploaded. You can remove account IDs before pasting if you prefer.
  • Phishing quiz and binary converter: no data leaves the page.

What the site stores on your device

We use your browser's localStorage for two things only. It never leaves your device and we can't see it:

  • nfl-theme: whether you picked the dark or light theme.
  • nfl-roadmap-…: which roadmap steps you ticked off.

Use Reset on a roadmap, or clear this site's data in your browser settings, to delete them.

Things the site loads from others

  • Google Fonts. The handwritten fonts are loaded from Google's servers, so your browser connects to Google and shares your IP address, as with any web request. See Google's privacy policy.
  • YouTube videos, only when you press play. Topic pages show a placeholder. Nothing loads from YouTube until you click it; then the video plays from youtube-nocookie.com and Google's privacy policy applies.
  • Hosting. The site is hosted on Cloudflare Pages. Like any web host, Cloudflare processes basic request data (such as IP address and browser type) to deliver pages and protect against attacks. See Cloudflare's privacy policy.

Links and share buttons

Social and share buttons are plain links, not embedded widgets, so Instagram, YouTube, WhatsApp, X, LinkedIn and Reddit learn nothing about you until you click one. Once you're on their sites, their own privacy policies apply.

Contact

There's no contact form, so nothing is collected here. If you email us, we only use your message to reply. Questions? Get in touch. If this page changes, the date at the top will change too.