100% Client-Side Engine
OfflineAll transformations happen directly inside your browser process.
Privacy Manifesto
We believe the best way to protect your privacy is to not collect your data in the first place. Pinebox is architected as a "Local-First" application, meaning the heavy lifting happens in your browser, not our servers.
1. Our Core Philosophy
Most online tools operate by sending your data (JSON, JWTs, Code) to a backend server for processing. This creates a risk: your sensitive data passes through a third party.
Pinebox tools run Client-Side via WebAssembly and JavaScript. When you paste a JWT or a cURL command, that string never leaves your device's memory. We literally cannot see it.
2. Data Handling Practices
What We Collect
- Server logs (IP address, User Agent) for DDoS protection.
- Aggregate, anonymous usage stats (e.g., "500 people visited /tools/jwt").
What We Do NOT Collect
- The content of your JWTs, JSON, or cURL commands.
- Your API Keys or Secrets.
- Personal Identification Information (PII).
3. Local Storage & Persistence
To improve your experience, some tools may save your preferences (like "Dark Mode" or "Last Used Secret") to your browser'slocalStorage.
- SAFEPersistenceThis data resides solely on your hard drive. Clearing your browser cache wipes it instantly.
4. Contact & Concerns
If you have questions about this policy or suspect a security issue, please open an issue on our GitHub repository. We maintain a transparent discussion on all security matters.