Privacy Policy

Last updated: April 2026

Pickbox is an independent developer project. This policy explains what data is collected, why, and how it's handled.

The short version

If you only use the developer tools: nothing you type is ever sent anywhere. All processing happens in your browser. There is nothing to worry about.

What we collect and why

1. Blog feedback

When you submit feedback on a blog post, we store your message and — if you choose to include it — your email address. This is used only to improve content. You'll never receive marketing email from us.

  • Stored: message text, optional email, post slug, timestamp
  • Retention: until deleted by the admin
  • Shared with: no one

2. Affiliate link clicks

When you click a /go/ redirect link, we log the click to measure affiliate performance. We do not store your IP address. Instead we store a short hash (SHA-256, non-reversible) that lets us count unique clicks per day without identifying you.

  • Stored: hashed IP fragment, user agent string, referrer URL, timestamp
  • Retention: indefinitely for analytics aggregation
  • Shared with: no one (used solely for internal analytics)

3. Analytics

We use Umami Analytics, a privacy-first analytics tool. Umami does not use cookies, does not track you across websites, and does not collect personally identifiable information. It gives us aggregate data like page views and country (derived from IP, not stored). Analytics run on all public pages — the admin panel is excluded.

4. Advertising

If you consent to advertising cookies, we load Google AdSense, which may personalise ads using cookies it sets. You can withdraw this consent at any time via the cookie settings at the bottom of the page.

5. Google Fonts

We load fonts (Inter, JetBrains Mono) from Google's CDN. Your browser connects to Google's servers to fetch them, which means Google may process your IP address per Google's privacy policy.

6. Admin accounts

Admin accounts (not accessible to the public) store an email address, hashed password, and name. These are never exposed outside the admin panel.

What we don't collect

  • Tool input or output — JSON, JWTs, images, regex patterns: none of it ever leaves your browser
  • Your name, email, or any account data as a regular visitor
  • Precise location
  • Device fingerprints

Cookies and local storage

See the Cookie Policy for the full list.

Your rights

You can:

  • Request deletion of feedback you've submitted (contact us with the post URL and approximate date)
  • Withdraw advertising consent at any time via the cookie banner
  • Use the tools without any account or tracking by blocking cookies/JavaScript (the tools will still work fully)

Contact

Questions? Reach out at kim@kimboender.dev.