Privacy Policy

Last updated: May 14, 2025

Short version: 418.tools collects only the minimum data needed to run collaborative sessions. Most tools work entirely in your browser and send nothing to our servers. Session data is automatically deleted after 72 hours. We have no accounts, no tracking, and no ads.

1. Who we are

418.tools is a collection of small developer utilities available at https://418.tools. The service is operated independently and is not affiliated with any company.

2. What data we collect and why

Client-only tools

The following tools run entirely in your browser. No data is sent to or stored on our servers:

UUID Generator — generates UUIDs locally using the Web Crypto API.
Password Generator — generates passwords locally; the result is never transmitted.
Cron Parser — parses and explains cron expressions locally.
Timestamp Converter — converts timestamps locally.

Collaborative tools (server-side)

The Sprint Retro and Planning Poker tools require a temporary shared session. When you use them we store:

Display name — the name you choose when joining a session. This is the only piece of personal-ish data we store, and you decide what name to enter.
Session content — retro cards (text you type), votes, task titles, and point estimates contributed during a session.
Timestamps — when the session was created and when participants joined.

There are no user accounts. No email address, password, or real identity is required or requested.

3. Data retention

Session data (sessions, participants, cards, votes) is automatically deleted after 72 hours. Deletion is triggered on the next session creation after the cutoff; there is no separate scheduled job. After deletion there is no way to recover the data.

4. Cookies

We set a single first-party cookie:

theme — stores your light/dark preference (light or dark). It contains no personal information and is not shared with anyone.

We do not set any tracking, analytics, or advertising cookies.

5. Infrastructure and hosting

418.tools is hosted on AWS Amplify with Amazon CloudFront as the CDN. Standard web server access logs (IP address, request path, timestamp, user-agent) may be retained by AWS for a limited time as part of normal infrastructure operation. These logs are subject to the AWS Privacy Notice.

DNS is managed through Cloudflare in DNS-only mode (no traffic proxying). Cloudflare may log DNS query metadata as described in the Cloudflare Privacy Policy.

6. Analytics and third-party tracking

We do not use Google Analytics, Meta Pixel, or any other third-party analytics or advertising service. No data about your usage of 418.tools is sold or shared with third parties for commercial purposes.

7. Fonts

The site loads DM Sans and JetBrains Mono from Google Fonts. When your browser fetches these fonts, Google may receive your IP address and user-agent. Refer to the Google Privacy Policy for details.

8. Children

418.tools is not directed at children under 13. We do not knowingly collect any data from children.

9. Changes to this policy

If we make material changes to this policy, we will update the "Last updated" date at the top. Continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact

Questions or requests about this privacy policy can be sent to: lapov.art@gmail.com