Privacy Policy

What Delimiter.live does and does not do with the things you type into it. Last reviewed 7 August 2026.

The short version

108 of our 115 tools run entirely inside your browser. What you paste into them never reaches us. The remaining 7 tools need a server to do their job, so what you enter is sent to us — and, for one tool, on to a third party. Each tool page says which applies before you use it. Nothing you enter into any tool is stored in a database.

Tools that run in your browser

Every tool in the text, data conversion, extraction and encoding categories, and every developer tool except the QR code generator, is implemented in JavaScript that runs on your device. The text, file or password you enter is processed locally and the result is displayed locally. No network request is made, so there is nothing for us to receive, log or retain. Files you load with the "Load file" button are read by the browser and are not uploaded.

These tools carry a green Runs in your browser badge.

Tools that run on our server

The following tools cannot work in a browser and therefore send what you enter to our server:

For these tools we process the input only to generate the response. It is not written to a database and it is not associated with you. Successful lookups are held in a short-lived server cache (between five and thirty minutes depending on the tool) so that repeated requests do not place unnecessary load on the systems being queried; that cache holds the query and its result, not any identifier for the person who made it.

Third-party providers

The IP address lookup tool sends the address you enter to ipwho.is, an external geolocation service, because we do not maintain our own geolocation database. That provider receives the IP address being looked up and our server's request; it does not receive your IP address unless you are looking up your own. No other tool contacts a third party.

Server logs

Like every website, our hosting provider records standard web-server access logs. These contain the requesting IP address, the time, the URL requested, the response status, the referrer and the browser user-agent string. They exist for security, abuse prevention and diagnosing faults, and are retained by the hosting provider under its own retention schedule. Because tool input for browser-side tools never becomes part of a request, it never appears in these logs.

Do not put secrets, credentials or regulated personal data into any online utility, including this one. For server-side tools, treat anything you type as being as exposed as a URL.

Cookies and local storage

This is the complete list. There is nothing stored on your device that is not in this table.

Name Kind Purpose Expires Consent
delimiterlive_session First-party cookie Carries the cross-site request forgery token that protects the 7 server-side tool forms. Encrypted, and not readable by JavaScript. 2 hours Strictly necessary
XSRF-TOKEN First-party cookie The readable half of that same protection, so a form can prove it came from this site. 2 hours Strictly necessary
delimiter-theme Local storage Your light or dark choice, written only when you press the theme switch. Stays on your device and is never sent to us. Until you clear it Strictly necessary
delimiter-search-index Session storage A copy of the public tool list, so search does not refetch it as you move between pages. Contains no information about you. When you close the tab Strictly necessary
delimiter-consent Local storage Remembers whether you accepted or refused analytics, so you are not asked again. 6 months Strictly necessary
_ga, _ga_… Google Analytics cookie Identifies your browser across visits so that page views can be counted without double-counting the same person. 2 years Only with your consent
_clck, _clsk Microsoft Clarity cookie Identifies your browser and the current session so that a recording of how the page was used can be assembled. The contents of every tool are masked before the recording leaves your browser. 1 year and 1 day respectively Only with your consent
__gads, __gpi, test_cookie Google AdSense cookie Set by Google to select ads, limit how often the same ad is repeated, and detect invalid traffic. Google may also read identifiers it already holds for your browser. Up to 13 months Advertising

The first four are what the site cannot work without: a form that cannot prove where it came from cannot be submitted safely, and a theme switch that forgets is not a theme switch. They identify a request, not a person, and no consent is required for them.

Analytics, and how consent works here

We would like to use Google Analytics to understand which pages are used, so that effort goes to the tools people actually need. That is not something we are entitled to do without asking, so we ask.

Until you accept, no Google script is loaded, no request is made to googletagmanager.com, and no _ga cookie exists. Refusing takes one click, in a button that is the same size and in the same place as the one that accepts; there is no pre-ticked box and no option that is harder to reach than the other. Closing the banner without choosing is treated as a refusal for that visit, and nothing is loaded.

If you accept, IP anonymisation is enabled and Google may process device, browser, approximate location and interaction information according to its own terms. Analytics never receives the content you type into a tool, because that content is not part of any page interaction we measure.

You can change your mind at any time with Cookie settings at the foot of every page. Withdrawing consent deletes the _ga cookies from your device and reloads the page so that nothing carries on running. We ask again after six months in any case. Browser privacy settings, tracking protection and content blockers also prevent all of this, and nothing on the site stops working if you block it.

Session recording, and what it is not allowed to see

With your consent we use Microsoft Clarity to record how pages are used — where people scroll, what they click, where they hesitate — so that layouts which confuse people can be found and fixed. Like analytics, nothing is loaded until you accept, and refusing takes one click.

A recording tool of this kind would, left alone, capture the text on the page. That is unacceptable here: it would mean a decoded token, a generated password, a bcrypt hash or a formatted JSON document appearing in a recording, when the whole point of the browser-side tools is that such content never leaves your device.

So the entire tool workspace — the input, the options and the result — is marked as masked content. Clarity records that a field was typed in and that a result appeared; it does not receive what either of them said. This applies to the seven server-side tools as well, so your IP lookup and the hash you generated are equally excluded.

Withdrawing consent deletes the _clck and _clsk cookies from your device and reloads the page, so nothing carries on recording.

Advertising

This site is free and carries ads served by Google AdSense. Google sets its own cookies and may use identifiers it already holds to choose which ads you see, to avoid repeating the same one, and to detect invalid traffic. It processes that under its own terms, not ours.

We should be straight with you about the timing: the ad script currently loads with the page, before you have answered the cookie banner. The banner governs analytics only. If you would rather it did not, a content blocker or your browser's tracking protection will stop it, and nothing on the site stops working without it.

What you type into a tool is never part of this. The 108 browser-based tools never send it anywhere at all, and the ad network has no access to the contents of any field on the page.

Your rights

We do not operate accounts and do not hold a profile about you, so in practice there is nothing to export or delete on request. If you have made contact by email and want that correspondence removed, or you have a question about the server logs held by our hosting provider, write to hello@delimiter.live and we will deal with it.

Children

The site is a general-purpose utility and is not directed at children. We do not knowingly collect information from anyone, of any age.

Changes

If this policy changes in a way that affects how data is handled, the revised date at the top of this page will change and the description of each tool's processing will be updated to match. The badge on each tool page is always the authoritative statement for that tool.

Contact

Privacy questions can be sent to hello@delimiter.live.