Privacy
The short version: what you type into a tool on apikey.tools is processed by your browser and is not sent anywhere.
Tool input
Keys, tokens, payloads, source code and every other value you enter into a tool are processed locally by JavaScript running in your tab. They are not transmitted, not logged and not stored. This is a property of how the site is built rather than a policy commitment — see how it works for how to verify it.
What is stored on your device
One item, in localStorage: your light or dark theme preference, under the key theme. It never leaves your browser. Clearing site data removes it. No cookies are set by this site, and none are needed.
Server logs
Pages are served as static files. Whichever host serves them will record standard request information — IP address, user agent, requested path, timestamp — as any web server does. That log records which page you loaded. It cannot record what you typed into it, because that never becomes a request.
Analytics
This site uses Google Analytics to count page views. It records which pages are loaded, along with the usual request metadata — approximate location, device and referrer. It runs on page load and has no access to the contents of any tool: your input never becomes part of a URL, an event or a form submission, so there is nothing for it to collect.
If you would rather not be counted, any content blocker or the browser's Do Not Track setting stops it, and every tool on this site keeps working with it blocked — including with the network switched off entirely.
Third parties
Beyond the analytics above: no advertising networks, no session recording, no A/B testing services. Fonts are self-hosted rather than loaded from a font CDN, so rendering a page does not announce your visit to an additional company.
Data we could not disclose if asked
There is no account system, so there is nothing to associate a credential with a person. There is no database of submitted values, because values are never submitted. A subpoena, a breach of this site, or a change of ownership could not expose secrets you generated here — they were never here.
Your responsibilities
- A secret copied to your clipboard is readable by other applications on your device.
- Browser extensions can read any page you visit, including this one.
- Screenshots, screen sharing and shoulder surfing are outside anything this site can control. Use the masking tool before sharing a screen.
Changes
If this ever changes in a way that affects the guarantee above, the change will be stated plainly on this page and on how it works, not buried in a revision history.