Privacy Policy

The short version

elefcode is a collection of developer tools that run entirely in your browser. Whatever you paste, type, upload, or generate never leaves your device — it is not sent to, stored on, or seen by any server. We have no backend, no database, and no user accounts.

Some tools download extra components the first time you use them (for example a database engine or Python), and a few features contact another service only when you ask them to. Both are listed under “Third-party services” below; neither sends what you type.

Data we process

• Tool input/output — processed locally in your browser (and Web Workers). Never transmitted to us or to any server.
• Remembered input— most tools remember your last input and settings in your browser's local storage, so your work is still there if you reload or come back later. This data stays on your device. Use the Resetbutton on any tool to clear it, or clear your browser's site data to remove all of it at once. Tools that handle secrets — encryption keys, passwords, tokens, HMAC and TOTP secrets, .env files and docker run commands — never store their input.
• Shareable links — when you click “Share link”, a tool encodes its input into the link itself, so the recipient sees the same thing. This goes in the part of the URL after #, which browsers do not send to any server — so opening a shared link does not reveal its contents to us or our hosting provider. (Links created before October 2026 by a few tools used a URL parameter instead; those still open, and the tool removes the parameter from the address bar once it has read it.) Anyone you send a link to can read what it contains, so do not share links to sensitive input — the JWT Decoder warns you before copying a link to a token.
• Other local storage — your recently used tools, whether the sidebar is minimized, and the work saved by tools that keep it (such as diagrams, page designs, schemas, block programs, QR codes and regex patterns). The SQL Playground can also keep its database in your browser's IndexedDB if you choose to.

Advertising & cookies

elefcode may display ads served by Google AdSense, a third-party advertising service. To support these ads, the following apply:

• Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website and other websites.
• Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to elefcode and/or other sites on the internet.
• You can opt out of personalized advertising by visiting Google Ads Settings. You can also opt out of some third-party vendors' use of cookies at aboutads.info.

In the European Economic Area, the UK and Switzerland, and in US states whose laws require it, Google's consent message asks for your choice before personalized ads are shown, and lets you change it later. Your choice is stored by Google in a cookie.

Separately, elefcode stores data in your browser's local storage and IndexedDB — such as your tool drafts, history, preferences, and the sites, blocks and versions you make in the Page Builder — purely to make the tools work. That data never leaves your device.

Third-party services

• Google AdSense — displays advertisements and may set cookies as described above. See How Google uses information from sites that use its services.
• Google Analytics — counts page visits and how the site is used (pages viewed, approximate location, device and browser) using cookies. It never sees what you type or paste into a tool. See How Google uses information from sites that use its services or opt out with the Google Analytics opt-out add-on.
• Cloudflare — hosts the site. Like any web host, it receives the standard information your browser sends with each request (such as your IP address and browser type) to deliver pages and protect the site.
• jsDelivr CDN — delivers large components only when you use the tool that needs them: PostgreSQL (PGlite) and SQLite (sql.js) for the SQL Playground and DB Designer; Python (Pyodide) and the Python packages your code imports, for the Code Runner and Blockly; the TypeScript compiler (Babel) and any npm packages you import in the Code Runner; and the STEP, IGES, IFC and 3DM readers and the fonts for DXF text, for the CAD Viewer. jsDelivr sees your IP address and which component is requested, not your code or data. See thejsDelivr privacy policy.
• Page Builder content you add — a Google Map, a YouTube or Vimeo video, or a Google Font you choose loads from Google, YouTube (its no-cookie player) or Vimeo while you edit, and on the site you publish. Those services see your IP address. Nothing loads from them until you add such a block or font.
• Your own code — in the Code Runner, network requests written in your program (for example with fetch) go wherever your code sends them.
• allorigins.win — only used by the Meta Tag Generator's optional “Import from URL” feature, and only when you trigger it. The URL you enter is sent to that proxy to fetch the page's tags.

Your rights (GDPR, CCPA, Egypt's PDPL)

Because elefcode does not collect or store personal data on any server, there is nothing for us to export or delete on your behalf. For advertising data, your rights are exercised through Google's controls linked in the “Advertising & cookies” section above. This also applies to rights under Egypt's Personal Data Protection Law (Law No. 151 of 2020). EEA, UK, and California visitors can opt out of personalized advertising there with no loss of functionality — the tools work the same whether or not ads are personalized.

Children

elefcode is not directed at children under 13 and does not knowingly collect their data.

Changes & contact

We may update this policy; the “last updated” date reflects the latest revision. Questions or requests: email[email protected] or use thecontact page.