Privacy Policy

Last updated: May 31, 2026 · Effective immediately

    Short version: Our browser-based tools process everything locally — nothing you type is sent to our servers. Our API processes requests in memory and does not store your data. We don't use tracking pixels, third-party analytics, or sell your data.
  

1. What We Are

Hatchloop ("we", "our", "us") operates hatchloop.dev, a collection of free developer tools and APIs. This Privacy Policy explains how we handle information when you use our Service.

2. Data We Collect

Browser-based tools (JSON Formatter, JWT Decoder, Token Counter, etc.):
These tools run entirely in your browser using JavaScript. No input data is ever sent to our servers. We have no technical ability to see what you paste into these tools.

API requests (when you call our REST API):
When you call our API endpoints (e.g. /api/tools/dns, /api/tools/fake), we receive:

Your IP address (required for the network connection)
Your request parameters (domain to look up, text to tokenize, etc.)
Your user-agent string

This data is processed in memory to serve your request and is not stored, logged, or retained beyond the request lifecycle.

Traffic logs:
We maintain server-side access logs containing IP addresses, requested URLs, HTTP status codes, and timestamps. These logs are used for security monitoring (detecting attacks, abuse) and understanding site usage. Logs are retained for up to 30 days and are never sold or shared with third parties.

Paid subscriptions (Hatchloop Pro):
Payments are processed by Polar.sh. We receive order confirmations and subscription status. We do not store credit card numbers — all payment processing is handled by Polar.sh and their payment processor. See Polar.sh's privacy policy for details on how they handle payment data.

3. What We Don't Do

We do not use Google Analytics, Facebook Pixel, or other third-party tracking
We do not sell, rent, or share your data with third parties for marketing
We do not use cookies except where strictly necessary (e.g. session authentication for Pro subscribers)
We do not build advertising profiles

4. Third-Party Services

We use the following third-party services to operate:

Caddy (web server) — processes HTTP requests, no data sent to third parties
Polar.sh — payment processing for Pro subscriptions (their privacy policy)
DigitalOcean — VPS hosting (their privacy policy)
Vercel — DNS management for hatchloop.dev

5. Security

We use HTTPS (TLS) for all connections. Our server runs with minimal permissions and is regularly monitored. We do not store sensitive user data, which minimises the impact of any hypothetical breach.

6. Your Rights

Since we retain minimal data, there is little to request. However:

Access / deletion: Email us at support@hatchloop.dev and we will respond within 30 days
Subscription data: You can cancel and request deletion of account data through your Polar.sh dashboard

7. Children

The Service is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us information, contact us at support@hatchloop.dev.

8. Changes

We may update this policy. Material changes will be noted on this page with an updated date. Continued use of the Service constitutes acceptance.

9. Contact

Privacy questions: support@hatchloop.dev

Also see our Terms of Service.