1. Zero-Storage Client-Side Processing
Our cipher translators, text converters, binary decoders, and encoding helpers execute directly inside your browser runtime. When you enter plaintext, ciphertext, or keys into our interactive inputs:
- Local execution: The conversion algorithms run on your local device via JavaScript.
- No server ingestion: We do not upload, log, inspect, or store your tool inputs on our servers.
- No database persistence: Your secrets, drafts, and messages remain in your browser session and vanish when you close or refresh the page.
2. Information We Collect
While tool content stays local, standard web infrastructure and analytics services process certain technical data when you access the Site:
- Usage and Device Data: Including IP address, browser type and version, operating system, referring URLs, pages visited, timestamps, and page load performance. This data is used to secure our infrastructure and diagnose errors.
- Technical Identifiers: Cookies, local storage keys, and pseudonymous identifiers managed by analytics and advertising networks as detailed in our Cookie Policy.
- Voluntary Correspondence: If you reach out via our Contact form or email, we retain your name, email address, and message content to respond.
3. How We Use Information
We process technical and contact data to:
- Deliver, maintain, and monitor the performance of the Site;
- Detect and prevent malicious activity, bot attacks, and denial-of-service abuse;
- Analyze aggregate traffic trends to improve tool usability;
- Respond directly to bug reports, feedback, and user inquiries;
- Comply with applicable legal requirements and enforce our Terms of Service;
- Serve and measure non-personalized or personalized advertising where enabled.
4. Google Analytics (GA4) & Advertising (Google AdSense)
We use Google Analytics 4 to collect aggregated, pseudonymous statistics about visitor traffic and page engagement. GA4 helps us understand which tools are popular without identifying individual users.
We also partner with Google AdSense and third-party advertising exchanges to display ads. Google and its advertising partners use cookies and device identifiers to:
- Serve ads based on your visits to this Site and other sites across the web;
- Measure ad impressions, prevent fraudulent clicks, and monitor campaign performance;
- Personalize ad content based on inferred browsing interests where consented.
You can manage your Google ad preferences or opt out of personalized ads at Google Ads Settings or through AboutAds Choices. Read how Google processes data at policies.google.com/technologies/partner-sites.
5. EEA, UK, and Swiss Data Rights (GDPR / UK-GDPR)
If you reside in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, you have specific statutory rights under data protection laws:
- Right of Access: You may request confirmation of whether we process your personal data and obtain a copy.
- Right to Rectification & Erasure: You may request correction of inaccurate data or deletion of personal data.
- Right to Restrict & Object: You may object to data processing based on legitimate interests or request restrictions.
- Right to Withdraw Consent: Where processing relies on consent (such as certain ad tracking cookies), you can withdraw consent at any time.
- Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection supervisory authority.
Our legal basis for processing server logs is legitimate interest in operating a secure and reliable service (GDPR Art. 6(1)(f)). Where required, non-essential advertising cookies rely on consent (GDPR Art. 6(1)(a)).
6. California & US State Privacy Rights (CCPA / CPRA)
Residents of California and states with comprehensive privacy laws (such as Virginia, Colorado, Connecticut, and Utah) have the following rights:
- The right to know what personal information we collect, use, and disclose;
- The right to request deletion of your personal information;
- The right to correct inaccurate personal information;
- The right to opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising;
- The right to non-discrimination for exercising your privacy rights.
We do not sell personal information for monetary payment. Under statutory definitions where third-party ad cookies are classified as "sharing," you may opt out via browser cookie controls, Global Privacy Control (GPC) signals, or the opt-out mechanisms linked above.
7. Data Retention & Security
We retain voluntary contact submissions only as long as necessary to fulfill your request and maintain records required by law. Routine web server access logs are retained on a short rolling cycle for security auditing and then deleted.
We employ HTTPS encryption, industry-standard hosting security, and strict least-privilege access protocols. However, no internet transmission is ever completely secure.
8. Children's Privacy
Cipher Decipher is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately for deletion.
9. Policy Updates & Contact
We may update this policy periodically to reflect operational, legal, or regulatory changes. Revisions will be posted here with an updated date.
To exercise your privacy rights or ask questions, email us at contact@cipherdecipher.com or submit a message via our Contact Page.