How your privacy works
Privacy you can verify, not just trust.
Your JSON never leaves your browser.
Every transformation, analysis, and the Prompt Lab run as JavaScript on your own device. Don’t take our word for it — see the test below.
Verify it yourself in 20 seconds
- Open the playground.
- Open your browser’s DevTools → Network tab.
- Paste any JSON and run any tool — TypeScript, Zod, Diff, Prompt Lab, anything.
- Watch the Network tab: no request carries your payload. The only calls are tiny session/usage pings (a token and a tool name — never your data).
What runs locally (everything that touches your data)
All of it: format/validate, JSON→TypeScript/Zod/Prisma/SQL/YAML/CSV, diff, mock, JSON Schema, tree, JWT decode, Base64, the analysis tools (Explainer, Quality, Contract Doctor, Secrets), and the Prompt Lab. The Prompt Lab in particular never calls an external AI — it only helps you write a prompt to paste into a tool you choose.
What our server is for (never your payload)
A small server handles only: anonymous sessions, the free daily limit, checkout/payments, and license checks. These requests carry a session token, a tool name, or a license key — never the JSON you paste.
Pro cross-device sync is end-to-end encrypted
If you turn on Pro sync, your workspaces are encrypted in your browser (AES-GCM) with a key derived from your license key. We store only the resulting ciphertext — we cannot read your synced content. The key never reaches our server.
Why a paid tool can promise this — and free ones often can't
Most free browser tools are free because you are the product: ads, trackers, or “we may process your input on our servers.” PayloadIQ inverts that. You pay a little, so the tool works for you — no ads, no tracking-for-resale, on every tier — and the privacy is architectural: it runs on your machine, which you can confirm in the Network tab above.
Questions? support@payloadiq.dev