Most dev tools on this site process input in the browser and do not send the payload to our servers. Image compress and QR are the same unless the page clearly uploads.
The first time you paste something sensitive, refresh offline. If you still get a result, it is not depending on our backend. Upload features are a different case.
Clear the input when finished. Do not leave production JWTs, customer lists, or keys in screenshots or history — and do not paste the same blob into a random AI chat.
The same rule applies to MCP: prefer read-only. For the longer list, read the offline privacy checklist on this site.