Legal
Privacy Policy — DevKit (JWT Decoder, Base64 & Timestamp Tools)
Last updated 2026-07-11
The short answer
DevKit processes pasted developer data locally, makes no network requests, and collects nothing.
DevKit is a free developer toolbox that decodes and converts strings entirely on your own machine.
What we collect
Nothing. No analytics, no telemetry, no account, no crash reporting. DevKit sends no data of any kind to us or to any third party. It makes no network requests at all.
What it stores, and where
DevKit stores exactly two things, in your browser's local extension storage (storage.local):
- your chosen interface language, and
- which tool tab you used last.
Nothing you type into any tool — tokens, text, timestamps, patterns — is ever written to storage. If a surface hits an unexpected error, a short local error log (last 50 entries: time, surface, error message and stack) is kept in storage.local to help you troubleshoot. None of this leaves your browser. There is no storage.sync, so nothing is synced across devices.
Permissions and why
DevKit requests one permission, and no host access:
storage— to remember your language and last-used tool (above). Nothing else.
It requests no host_permissions, no activeTab, no tabs, no scripting, and declares no content scripts. DevKit cannot read, modify, or access any web page you visit — it has no technical means to do so.
Remote code
DevKit contains no remote code, no eval, and no external scripts. All code, fonts, and assets are bundled in the extension package and pinned to the extension's own origin by its Content Security Policy. The regular-expression matcher runs in a bundled Web Worker loaded from the extension itself.
Feedback you send us
DevKit itself submits nothing. If you choose to send feedback, that happens on our website, on your initiative; the extension does not transmit any report or diagnostic data. The links from the extension to our site (a one-line "Try AuthRoam" note and the "From the same studio" card) are ordinary navigation you must click — opening them loads a page in a new tab and carries only campaign attribution parameters (UTM); the extension makes no request itself.
Contact
Questions about this policy: [email protected]
Extensionsly — MDL Asia Sdn Bhd (Co. No. 1517967-A), Malaysia.
If this policy changes, the "Last updated" date above changes and the updated policy is published on our website. Adding any data collection would be a material change, disclosed here and in the store listing before it ships.
Extensionsly — MDL Asia Sdn Bhd (Co. No. 1517967-A), Malaysia