Privacy Policy

1. Overview

DevOpsArsenal ("we", "us", "our") operates the website at https://devopsarsenal.com (the "Service"). This Privacy Policy describes how we collect, use and share information when you use our Service.

We are committed to protecting your privacy. Our core design principle is that tool input data never leaves your browser — all processing happens client-side in JavaScript. This means we have no technical ability to see passwords you generate, JWTs you decode, API keys you paste, or any other data you enter into our tools.

2. Data We Collect

What we do NOT collect:

• Input data entered into any tool (passwords, tokens, keys, config files, code, logs)
• Your name, email address, phone number or postal address
• Payment information (the Service is completely free)
• Account or login credentials (no accounts exist)

What we may collect:

• Usage analytics: Pages visited, time on page, referrer URL, browser type, operating system, screen resolution, and country-level location. This data is aggregated and anonymised via Cloudflare Web Analytics (privacy-friendly, no cross-site tracking).
• Ad interaction data: Google AdSense may collect data about your interactions with advertisements served on our site (see Section 5).
• IP address: Processed transiently by our CDN (Cloudflare) for security and routing purposes. Not stored by us.
• Cookie data: See Section 6 for full details.

3. How We Use Data

We use the limited data we collect to:

• Understand which tools are most popular so we can improve them
• Detect and prevent abuse (e.g. DDoS protection via Cloudflare)
• Serve relevant advertisements through Google AdSense to fund the free service
• Monitor site performance and uptime

We do not sell your data to third parties. We do not use your data for automated decision-making or profiling. We do not share data with any party except as described in Section 4.

4. Third-Party Services

Our tools interact with the following external services. All interactions are direct browser-to-service calls — we do not proxy or see this data:

• Cloudflare DNS-over-HTTPS (cloudflare-dns.com/dns-query) — used by the DNS Lookup tool. Cloudflare's Privacy Policy: cloudflare.com/privacypolicy
• ipapi.co — used by the IP Geolocation tool to look up IP addresses. Privacy Policy: ipapi.co/privacy
• Google Fonts (fonts.googleapis.com) — typography. Google's Privacy Policy: policies.google.com/privacy
• Google AdSense (pagead2.googlesyndication.com) — advertising. See Section 5.
• cdnjs.cloudflare.com — serves forge.js for SSL certificate parsing. No personal data is transmitted.

We are not responsible for the privacy practices of these third-party services. We encourage you to review their respective privacy policies.

5. Advertising (Google AdSense)

We use Google AdSense to display advertisements on our site. Google AdSense is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google AdSense uses cookies and web beacons to serve ads based on your prior visits to our site and other websites. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to our site and/or other sites on the internet.

You may opt out of personalised advertising by visiting adssettings.google.com or aboutads.info/choices.

For more information about how Google uses data from advertising: policies.google.com/technologies/partner-sites.

Non-personalised ads: If you are located in the European Economic Area (EEA), UK, or Switzerland, or if you have not consented to personalised ads via our cookie banner, we will configure AdSense to serve non-personalised ads only — these do not use cookies for targeting.

6. Cookies

Cookies are small text files stored on your device. We use the following categories:

• Strictly necessary cookies: None. Our tools function without any cookies.
• Analytics cookies: Cloudflare Web Analytics uses a single first-party cookie (__cf_bm) for bot detection. No cross-site tracking. Can be blocked without affecting functionality.
• Advertising cookies (Google AdSense): Google may set cookies including __gads, __gpi, IDE, and DSID for ad personalisation and measurement. These are third-party cookies. You may reject these via our cookie consent banner or via browser settings.

You can control cookies through your browser settings or our cookie consent banner. Rejecting advertising cookies will result in non-personalised ads — the tools will continue to function normally.

7. Your Rights

Under GDPR (EU/EEA/UK residents):

• Right of access: Request a copy of any personal data we hold about you
• Right to erasure: Request deletion of your personal data
• Right to object: Object to processing for direct marketing or profiling
• Right to restrict processing: Request we limit how we use your data
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to withdraw consent: Withdraw cookie consent at any time via our banner

Since we collect minimal data and run all tools client-side, most GDPR rights are satisfied by design. For analytics data, our processor is Cloudflare which is GDPR-compliant and processes data under Standard Contractual Clauses.

Under CCPA (California residents):

• You have the right to know what personal data is collected and how it is used
• You have the right to opt out of the sale of personal data — we do not sell personal data
• You have the right to non-discrimination for exercising your privacy rights

Under India DPDP Act 2023 (Indian residents):

• You have the right to access information about your data
• You have the right to correction and erasure of inaccurate or incomplete data
• You have the right to grievance redressal
• You have the right to nominate a person to exercise your rights in case of death or incapacity

To exercise any of these rights, contact us at privacy@devopsarsenal.com. We will respond within 30 days.

8. Data Retention

Since all tool processing happens in your browser, we retain no tool input data at all.

Analytics data (aggregated, anonymised page views) is retained for up to 12 months by Cloudflare Web Analytics.

Advertising cookie data is controlled by Google — refer to Google's data retention policies at policies.google.com/privacy.

9. Children's Privacy

DevOpsArsenal is a professional developer tool suite intended for adults and professionals (18+). We do not knowingly collect personal data from children under 13 (USA — COPPA) or children under 16 (EU — GDPR). If you believe a child has submitted personal data, contact us at privacy@devopsarsenal.com and we will take steps to delete it promptly.

10. Contact Us

For privacy-related questions, requests or complaints:

• Email: privacy@devopsarsenal.com
• General contact: hello@devopsarsenal.com
• Website: devopsarsenal.com

We will acknowledge your request within 5 business days and resolve it within 30 days. For unresolved complaints, EU residents may contact their local Data Protection Authority.

We may update this Privacy Policy from time to time. We will notify users of material changes by updating the "Last updated" date at the top of this page. Continued use of the Service after changes constitutes acceptance of the revised policy.