Privacy Policy
Last updated: September 10, 2026
TL;DR
JSON transformation and patching run in your browser; JSON Patch Online does not upload editor contents. The page still makes normal hosting requests and uses Vercel Web Analytics, which is cookieless. If you create a share link, the editor state is encoded in that URL.
100% Client-Side Processing
All JSON transformation, diffing, and patching happens in your browser. JSON Patch Online does not send the editor contents to its application server.
If you choose Copy Share Link, the current JSON and patch are encoded in the URL. That URL can remain in browser history, be copied into messages, and be visible to anyone who receives it. Do not put secrets in a share URL. Closing the tab clears in-memory editor state, but it does not remove a URL from browser history or from places where it was shared.
What We Don't Collect
To be explicit, we do not collect:
- Your JSON input data or patch output
- Names or email addresses through the editor
- Browser fingerprints created by JSON Patch Online
- Any form of cross-site tracking data
Analytics
We use Vercel Web Analytics to understand basic, aggregate usage patterns (e.g. page views, referrers, country-level geography). Here's what makes it different from traditional analytics:
- No cookies — nothing is stored on your device
- No cross-site tracking — your activity is not followed across the web
- Aggregate reporting — JSON Patch Online uses the reports to understand page-level traffic, not editor contents
- No editor payloads — analytics requests do not include the JSON in the editors
Cookies
JSON Patch Online does not set analytics cookies. Vercel Web Analytics is configured as a cookieless service.
Your theme preference (light/dark) is stored in localStorage, which is a browser-local storage mechanism that is never transmitted to any server.
Data Security
JSON transformation happens locally, which avoids uploading editor contents for processing. The site is served over HTTPS and its assets are delivered through Vercel. Share URLs are different: they contain encoded editor state and should be treated as sensitive whenever the source JSON is sensitive.
Third-Party Services
The only third-party services we use are:
- Vercel — hosting and edge delivery (Vercel Privacy Policy)
- Vercel Web Analytics — privacy-friendly, aggregate-only page analytics (Analytics Privacy Policy)
We do not use Google Analytics, Facebook Pixel, or any other tracking service.
Changes to This Policy
If we make meaningful changes to this policy, we'll update the "Last updated" date at the top. Given the nature of this tool (everything runs client-side), significant privacy changes are unlikely.
Contact
If you have any questions about this policy or how the site works, you can reach us at patchjson@gmail.com.