Privacy

PithLab tools process your data in your browser whenever that is possible. Text, JSON, passwords and numbers you enter into a browser-based tool stay on your device and are not sent to PithLab or anyone else.

Every tool page says where processing happens. Tools marked Runs in your browser never upload your input. Tools that genuinely need a server, such as DNS lookups or website checks, are clearly marked as sending your input to our server, and we only use it to produce the result.

Your favourite and recently used tools and your theme choice are saved in your browser's local storage so the site can remember them. They are never sent to us, and clearing your browser data removes them.

We use self-hosted, cookieless analytics to count visits to public pages and understand which tools are useful. We record the public page path, referring website, browser, language, screen size and approximate location. Your IP address is used to derive an anonymous visit identifier and location, but is not stored in the analytics database. We never send tool input, query strings, filenames or account IDs, and we do not track account or admin pages. We respect Do Not Track and Global Privacy Control. Analytics records are removed after 90 days; encrypted daily backups expire after seven days. We do not use advertising trackers or follow you across websites.

Accounts

You don't need an account to use PithLab. If you create one, we store your email address, optional name, a securely hashed password (never the password itself), when you signed up and last signed in, and the browser sessions you're signed in on. A strictly necessary cookie keeps you signed in. We use your email address only for account messages such as confirming your address and resetting your password.

You can download everything we store about your account as a JSON file, and delete your account, at any time from your account page. Deleting it permanently removes your account data; invoices are kept without your account for our financial records. For anything else, use the contact form and choose “Privacy request”.