Privacy Policy

1. 100% Client-Side Processing Guarantee

Unlike traditional web utility platforms that send your confidential input across the Internet to a remote backend API for processing, WebCraftKit uses a zero-server-transmission architecture.

All computational algorithms, text manipulations, cryptographic hashing, and format transformations are executed directly by your client device via native browser runtime environments:

• Cryptographic Security: All SHA-256, SHA-512, MD5, and HMAC computations utilize the native W3C Web Cryptography API (window.crypto.subtle), running hardware-accelerated directly on your CPU/GPU.
• Encoding & Decoding: Base64, URL encoding, and UTF-8 transformations use browser-native TextEncoder, TextDecoder, and btoa/atob primitives.
• Data Isolation: JWT parsing, JSON validation, and TypeScript code generation occur entirely in client-side memory without initiating any HTTP POST, PUT, or WebSocket payloads containing your data.

2. Information We Collect (And What We Never Store)

A. What We NEVER Collect:

• Tool Input & Output Payloads: Passwords, private keys, API secrets, JWT payloads, customer data, CSS code, or text entered into any tool.
• Personally Identifiable Information (PII) from Tool Usage: We do not require accounts, user profiles, credit cards, or logins.
• Telemetry on User Inputs: We do not log keystrokes, clipboard paste events, or tool calculation results.

B. Information Automatically Processed:

When you load pages on WebCraftKit, our static content delivery network (CDN) and analytics/advertising partners may collect standard web telemetry:

• Device & Browser Metadata: Browser type, operating system, screen resolution, preferred language, and referring URL.
• Internet Protocol (IP) Address: Used solely for geographic CDN routing, security threat detection (DDoS mitigation), and anonymized aggregate traffic metrics.
• Consent Preferences: Your selected cookie preferences stored in your browser's localStorage (key: wck_cookie_consent).

3. Google AdSense & DoubleClick DART Cookies

WebCraftKit is supported by online advertising to remain 100% free for developers globally. We partner with Google AdSense to display advertisements.

Google is a third-party vendor on our site. Google uses cookies, web beacons, and unique device identifiers to serve ads to visitors based on their visit to WebCraftKit and other websites on the Internet:

• DoubleClick DART Cookie: Google's use of the DART cookie enables it and its advertising partners to serve ads to our users based on their prior visits to our site and/or other sites across the World Wide Web.
• Personalized vs. Non-Personalized Ads: Depending on your jurisdiction and cookie consent choice, Google may serve personalized ads (based on your interests) or non-personalized ads (contextual ads based on current page content).
• Third-Party Ad Networks: Third-party ad networks or ad servers may also use cookies, JavaScript, or Web Beacons to measure the effectiveness of their advertisements and personalize the advertising content you see.

4. Google Consent Mode v2 & Cookie Control

WebCraftKit strictly implements Google Consent Mode v2. We do not activate marketing or tracking scripts until you have been presented with our Cookie Consent Banner and have provided explicit consent where required by law.

You can modify your cookie preferences at any time by clearing your browser's local storage or clicking "Reset Cookie Consent" in our footer.

5. Server Log Files & Hosting Telemetry

WebCraftKit follows standard procedures of using hosting server log files. Our edge hosting provider (Google Firebase Hosting / Cloudflare) automatically logs visitors when they access static web assets.

The information collected in server log files includes:

• Internet Protocol (IP) addresses
• Browser type and version
• Internet Service Provider (ISP)
• Date and timestamp of HTTP GET requests
• Referring and exit pages
• HTTP status codes (e.g., 200 OK, 404 Not Found)

These server logs are maintained strictly for operational security, preventing malicious automated abuse, debugging cache invalidation, and analyzing edge server capacity. They are never linked to any personally identifying user payloads.

6. European Privacy Rights (GDPR)

If you are a resident of the European Economic Area (EEA), United Kingdom, or Switzerland, you possess statutory rights under the General Data Protection Regulation (Regulation (EU) 2016/679) and the UK Data Protection Act:

• The Right to Access (Article 15): You have the right to request copies of any personal data we hold about you.
• The Right to Rectification (Article 16): You have the right to request that we correct inaccurate or incomplete information.
• The Right to Erasure / "To Be Forgotten" (Article 17): You have the right to request that we erase your personal data under certain conditions.
• The Right to Restrict Processing (Article 18): You have the right to request that we restrict the processing of your personal data.
• The Right to Object to Processing (Article 21): You have the right to object to our processing of your personal data, including for direct marketing and analytics.
• The Right to Data Portability (Article 20): You have the right to request transfer of your data to another organization.

Note on Client-Side Isolation: Because WebCraftKit does not collect user accounts, names, or tool inputs, we hold zero user-identifiable tool data on our servers. If you make a privacy request, we will respond within one calendar month.

7. California Privacy Rights (CCPA / CPRA)

Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), California residents have specific statutory privacy rights:

• Right to Know: You have the right to request disclosure of categories and specific pieces of personal information collected over the preceding 12 months.
• Right to Delete: You have the right to request the deletion of personal information collected from you.
• Right to Correct: You have the right to request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing ("Do Not Sell or Share My Personal Information"): WebCraftKit does not sell your personal information for monetary compensation. However, under California law, the transfer of data to third-party ad networks (such as Google AdSense) for cross-context behavioral advertising may be defined as "sharing". You can opt out by denying marketing cookies in our Cookie Banner or utilizing the Global Privacy Control (GPC) signal.
• Right to Non-Discrimination: We will never deny services, charge different prices, or provide a different quality of service for exercising your CCPA/CPRA rights.

8. Third-Party Integrations & External CDNs

To deliver an ultra-fast, visually polished experience, WebCraftKit uses selected trusted third-party providers:

• Google Fonts: WebCraftKit loads modern typography (Plus Jakarta Sans, JetBrains Mono) via Google Fonts. Google may receive standard HTTP request headers including your IP address and user-agent. See Google Fonts Privacy FAQ.
• Google Firebase Hosting: Our static application files and Edge CDN distribution are hosted globally on Google Firebase.
• Google AdSense: Serves responsive display advertisements as outlined in Section 3.

9. Browser Sandboxing & Security Safeguards

WebCraftKit employs modern web security headers and browser-sandboxing techniques to prevent unauthorized data access:

• HTTPS Everywhere: All traffic is encrypted in transit using modern TLS 1.3 cryptographic protocols with HSTS preloading.
• Content Security Policy (CSP): Restricts unauthorized script injection and cross-site scripting (XSS) vectors.
• No Server-Side Ingestion: Because your inputs are never submitted to our backend, there is zero risk of backend database leaks or unauthorized data exposure of your sensitive tokens or keys.

10. Children's Online Privacy Protection (COPPA)

Protecting the privacy of young children on the Internet is especially vital. WebCraftKit does not knowingly collect any Personally Identifiable Information from children under the age of 13 (or under 16 in certain jurisdictions).

If you believe that a child has provided personal information on our website, please contact us immediately, and we will promptly take appropriate action to remove such information from our records.

11. Changes & Version Revisions

We may update our Privacy Policy periodically to reflect changes in web standards, legal regulations, or new client-side features. Any updates will be posted on this page with an updated "Last Updated" timestamp at the top of the document.

We encourage you to review this Privacy Policy periodically for any changes. Continued use of WebCraftKit after revisions signifies acceptance of the updated terms.

12. Data Protection Officer Contact

If you have questions, inquiries, or legal requests regarding this Privacy Policy or our client-side processing practices, please reach out to our Data Protection Desk: