Privacy Policy

Last updated: 20 October 2026

Overview

TokenPeek is a free, browser-based console for decoding JWTs, encoding and decoding Base64 / Base64URL, generating cryptographic hashes, and creating UUID v4 values on your device. This policy explains what happens when you use the site at the published TokenPeek origin (and any future domain for the same product).

In short: decoding and hashing run locally in your browser. We do not operate a cloud decoder API for your tokens, we do not require accounts, and we do not show ads.

What we process — and what we don’t

We do not receive the tokens or text you paste for decoding, encoding, hashing, or UUID display. When you use the console, Base64 transforms, JWT splitting, Web Crypto digests, the local MD5 helper, and UUID generation run in your browser. Contents are not uploaded to TokenPeek servers as part of the tool flow.

We do not ask you to create an account. We do not collect names, email addresses, or payment details through this product — there is no checkout and no paid plan.

We do not sell personal data. We do not use advertising networks on this site.

Local processing

JWT header/payload display, Base64 round-trips, SHA-1 / SHA-256 / SHA-512 (via Web Crypto), MD5 (via a small same-origin script), UUID v4, Copy, and privacy-receipt downloads are handled on the device running your browser.

Optional preferences — such as language (tokenpeek-lang-v1) — may be stored in your browser’s localStorage so they persist between visits on that same browser and device. You can clear them by clearing site data in your browser settings.

Hosting and network logs

The site is a static site hosted on Cloudflare Pages. Like most websites, requesting pages, scripts, styles, and public assets may create standard edge or access logs at the hosting/CDN layer (for example IP address, user agent, URL path, and timestamps). Those logs are used for operating and securing the delivery of the site.

We do not use hosting logs to inspect or reconstruct the content of tokens you process, because those tokens are not sent to us for processing.

Cookies and local storage

TokenPeek does not rely on third-party advertising cookies. We may use browser localStorage for preferences described above. If Cloudflare or the browser itself sets strictly technical cookies for delivery or security, that is outside the console tool and is not used by us to track token content.

Analytics

We do not run third-party analytics (such as Google Analytics or Plausible) on this site at the time of this update. If that ever changes, we will update this policy before enabling it.

Third-party scripts

Processing runs with browser APIs and same-origin scripts bundled with the site, not loaded from unrelated third-party ad or tracker domains for the core tool.

Security note on JWTs

TokenPeek displays JWT parts for inspection and does not verify signatures, accept secrets, crack keys, or forge tokens. Treat decoded payloads as potentially sensitive data that stays on your device.

Children

TokenPeek is a general-purpose utility. We do not knowingly collect personal information from children. Because processing is local and we do not require accounts, we do not solicit such information through the product.

International users

The product UI defaults to English. A Chinese language option is available only when you choose it. Selecting a language stores a preference locally; it does not create an account profile on our servers.

Changes

We may update this policy as the product or hosting setup changes. The “Last updated” date at the top will change when we do. Continued use of the site after an update means you accept the revised policy.

Optional feedback form. If you use the floating Feedback button, we store the email address you enter, your message, which TokenPeek site you came from, the page URL, a basic browser user-agent string, and the time of submission in our database so we can read and respond. Tool file processing still runs locally in your browser and is separate from this form. 中文：若你使用右下角「反馈」按钮，我们会保存你填写的邮箱、反馈内容、来源站点、页面地址、浏览器信息和提交时间，便于回复；工具本身的文件处理仍在本地完成。

Contact

For privacy questions about TokenPeek, contact the SqueezeCodex maintainers via the project channels listed on sister sites in the footer. Do not paste production secrets into support messages.