Privacy policy

Last updated: [publication date]

JSON Mill is a free tool for viewing, editing and converting JSON, available at jsonmill.com (the "Service"). It is operated by [legal entity name] ("JSON Mill", "we", "us"). This policy explains what information we collect, how we use it, and the choices you have.

The short version

• The JSON you paste, open or edit is processed in your browser. It is not sent to us unless you choose to save or share it.
• You can use JSON Mill without an account. If you create one, we store your email address and the documents you choose to save.
• We do not sell your personal information, and we do not use the contents of your documents for advertising or to train machine learning models.
• You can export or delete your data at any time.

1. JSON you work with

When you use the workspace without saving, your data stays on your device. Formatting, validation and conversion run in your browser. Unsaved work may be kept in your browser's local storage so it survives a page reload; you can clear it at any time by clearing the workspace or your browser's site data. See how your data stays local for details and for how to verify this yourself.

Your data leaves your device only when you take an action that requires it, such as saving a document to your account, creating a share link, or (where offered) asking JSON Mill to fetch a file from a URL on your behalf. JSON Mill tells you before any such action sends data.

2. Information we collect

Information you give us

• Account information: your email address, a securely hashed password (we never store your password itself), and an optional display name. If you sign in with Google or GitHub, we receive your email address and basic profile information from that provider, as permitted by your settings there.
• Saved documents: the documents you save, their titles and tags, earlier versions, and settings you save with them.
• Share links: the links you create, when they expire, and how many times each has been viewed.
• Messages to us: anything you send when you contact us or report content.

Information collected automatically

• Server logs: when your browser requests a page, our servers and our network provider record standard information such as IP address, browser type, the page requested and the time. These logs never include the contents of your documents.
• Usage statistics: we use privacy-friendly, aggregate analytics that do not use cookies or identify individual visitors, to learn which tools are used and where pages are slow.
• Error reports: if the Service fails, technical details about the error may be recorded. Error reports are configured to exclude document contents.

3. Cookies and browser storage

JSON Mill uses only what it needs to work:

• A session cookie and a security (CSRF) cookie, set only when you sign in or submit a form. They keep you signed in and protect your account from forged requests.
• Browser storage for your preferences (such as light or dark theme) and for unsaved work on your device.

We do not currently use advertising or cross-site tracking cookies. If we introduce advertising in the future, we will update this policy before doing so and ask for your consent where the law requires it.

4. How we use information

• To provide the Service: store and show you your saved documents, create and serve your share links, and keep your account secure.
• To communicate with you: account verification, password resets, security notices, and replies to your messages. We do not send marketing email without your permission.
• To protect the Service and its users: prevent abuse, spam and fraud, enforce our terms, and respond to reports of illegal content.
• To improve the Service, using aggregate statistics that do not include document contents.
• To comply with the law.

We do not read your saved documents except when needed to investigate a report of abuse or illegal content, to resolve a technical problem you have asked us to help with, or when required by law.

5. How information is shared

We do not sell or rent your personal information, and we do not share it for cross-context behavioral advertising. We share information only:

• With people you choose: anyone with a share link you create can view that document until the link expires or you stop sharing.
• With service providers who help us run JSON Mill, under contracts that limit their use of the information to providing services to us: hosting, content delivery and security, email delivery, error monitoring, and analytics. [List current providers, for example hosting provider, Cloudflare, Amazon SES, Sentry, analytics provider.]
• For legal reasons: when we believe in good faith that disclosure is required by law or legal process, or is necessary to protect the rights, property or safety of our users, the public or JSON Mill.
• In a business transfer: if JSON Mill is involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

6. How long we keep information

• Saved documents and their versions are kept until you delete them or your account. Older automatic versions may be pruned over time; versions you name are kept.
• Deleted documents stay in your trash for 30 days so you can restore them, then are permanently deleted.
• Share links expire after 7 days unless you choose otherwise, and stop working immediately when you stop sharing.
• Server logs are kept for about 14 days.
• When you delete your account, we delete your account information and documents. Copies in encrypted backups are removed as those backups expire, within [6 months].

7. Your choices and rights

You can view, edit, export and delete your saved documents at any time, and you can delete your account from your account settings. Depending on where you live, you may also have the right to:

• access the personal information we hold about you, and receive a copy in a portable format;
• correct inaccurate information;
• delete your information;
• object to or restrict certain processing;
• withdraw consent where we rely on it;
• opt out of the sale or sharing of personal information (we do not sell or share it);
• complain to your local data protection authority.

To exercise these rights, email [privacy@jsonmill.com]. We will respond within the time the law requires and will not discriminate against you for exercising your rights. We may need to verify your identity before acting on a request.

8. Legal bases (EEA and UK users)

We process personal information to perform our agreement with you (providing your account and saved documents), for our legitimate interests (keeping the Service secure, preventing abuse, and improving it with aggregate statistics), to comply with legal obligations, and with your consent where required (for example, any future advertising cookies).

9. International transfers

JSON Mill is operated from [country], and our service providers may process information in other countries. Where required, we use appropriate safeguards, such as standard contractual clauses, for transfers of personal information out of the EEA or UK.

10. Security

We protect information with encryption in transit (HTTPS), hashed passwords, unguessable document and share link identifiers, strict access controls, and a strict Content Security Policy. No method of storage or transmission is completely secure, so we cannot guarantee absolute security. Please avoid saving or sharing documents that contain passwords, API keys or other secrets.

11. Children

JSON Mill is not directed to children under 13, or under 16 in the EEA and UK, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

12. Changes to this policy

We may update this policy as the Service changes. We will post the new version on this page and update the date above. If a change materially affects how we use your personal information, we will notify account holders by email or through the Service before it takes effect.

13. Contact

Questions about this policy or your information: [privacy@jsonmill.com], or [legal entity name, postal address].