Privacy Policy

Welcome to CurlToAny.com. We recognize that developers frequently deal with confidential HTTP requests, internal API tokens, Bearer authorization credentials, staging URLs, and proprietary payloads when converting cURL commands into programming code. This Privacy Policy is designed to give you complete peace of mind: our tool operates with an uncompromising zero-data-retention architecture.

1. Zero Data Collection Policy

Traditional developer conversion utilities send your raw input strings to remote backend APIs for server-side processing. CurlToAny.com is deliberately engineered to eliminate that security risk.

• We do NOT store your cURL commands: When you paste a cURL command into the input editor, that data is processed directly inside your browser's V8 or JavaScriptCore engine.
• We do NOT log API keys or secrets: Sensitive authorization headers (e.g., Authorization: Bearer eyJ..., X-Api-Key, Basic auth, cookies, and tokens) are parsed locally and never dispatched over the network to our infrastructure.
• Zero server-side conversion pipelines: Our web application is served as static HTML, CSS, and pre-bundled client-side JavaScript. There is no conversion API endpoint receiving your payload.
• Your proprietary data remains strictly local: Whether you convert a simple GET request or a confidential GraphQL mutation containing PII, your data remains within your machine's sandbox.

2. Information We Do NOT Collect

To ensure complete transparency, we explicitly declare that CurlToAny does not collect, harvest, monitor, or broker any of the following categories of data:

• Personal Identifiable Information (PII): We do not ask for or collect names, physical addresses, telephone numbers, or personal profiles.
• Account or Login Credentials: CurlToAny is a 100% free tool that requires no account creation, sign-in, OAuth authorization, or password management.
• cURL Payloads & Request Bodies: JSON bodies, XML strings, multipart form data, file parameters, and URL query strings are never stored.
• Generated Source Code: Code produced in Python, Go, JavaScript, PHP, Rust, C#, Kotlin, Swift, or other target languages is rendered strictly on your screen.
• Browser Fingerprinting & Invasive Trackers: We do not build biometric or device fingerprint profiles to track user identities across the web.
• Payment Details: CurlToAny is completely free. We do not ask for credit card, debit card, or financial billing information.

3. Information We Automatically Collect (Minimal & Anonymized)

Like almost all modern websites, when you load the static web pages of CurlToAny.com, minimal, aggregated technical data may be processed to ensure website availability and DDoS protection:

• Aggregated Page Analytics: We may use privacy-first analytics tools (such as Plausible Analytics, Umami, or Google Analytics 4 configured with strict IP anonymization enabled). These tools provide non-identifiable metrics such as total page views, general country of origin, referring URLs, screen resolution category, and browser family. These statistics do not contain any personal information or information about what code you converted.
• Server Infrastructure Logs: Our hosting providers and content delivery networks (CDNs, such as Cloudflare or Vercel) maintain temporary server connection logs (e.g., HTTP status code, request timestamp, byte size) purely for network diagnostics, security defenses, and CDN caching. These transient logs are standard across the internet and are automatically purged within 30 days.

4. Cookies & Local Storage

We do not use invasive third-party tracking cookies or advertising pixels. Instead, we utilize standard HTML5 localStorage purely to remember your personal interface preferences locally on your device:

• Theme Preference: We store your chosen theme (dark or light) in localStorage.getItem('theme') to prevent screen flickering when navigating pages.
• Target Programming Language: We save your most recently selected conversion target (e.g., Python, Go, JavaScript) so the editor opens your preferred language by default on return visits.
• Local Conversion History (Optional): If you use the local history feature, recent conversion snippets are saved exclusively in your browser's private local storage space. You can clear this storage at any time with a single click or by clearing your browser cache.

5. Third-Party Services & External Links

CurlToAny.com may include links to third-party open-source projects (such as GitHub), technical documentation, or public API references. When you click an external link, you will be subject to that third party's privacy policy. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party websites or services.

Crucially, no third-party software development kit (SDK) or analytics service is ever provided access to the input fields where you enter cURL commands.

6. Children's Privacy (COPPA Compliance)

CurlToAny.com is a professional developer utility intended for software engineers, students, and technical professionals. Our service is not targeted at children under the age of 13, and we do not knowingly collect any personal identifiable information from children under 13. If you believe a child has provided personal information to us, please contact us immediately so we can promptly address the situation.

7. GDPR, UK GDPR, & CCPA / CPRA Compliance

Under the General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act (CCPA / CPRA), individuals have specific rights regarding their personal data, including the right to access, rectify, or erase personal information.

Because CurlToAny does not collect, process, store, or sell personal data or identifiable cURL strings, we do not maintain databases of personal records. However, if you have communicated with us directly via email or our contact form, you may exercise your rights by requesting the deletion of your email correspondence at any time by contacting our privacy officer.

8. Data Security Measures

Although we do not store your data on servers, we prioritize the security of the web application itself:

• All traffic between your browser and CurlToAny.com is encrypted using modern TLS / HTTPS (Transport Layer Security).
• We enforce Content Security Policies (CSP) and modern web security headers to mitigate cross-site scripting (XSS) and injection attacks.
• Our static bundle relies on clean, verified dependencies without third-party data-scraping scripts.

9. Changes to This Privacy Policy

We may occasionally update this Privacy Policy to reflect improvements to our tool, changes in legal regulations, or enhanced privacy protections. When changes are made, we will update the "Effective Date" at the top of this document. We encourage developers to periodically review this page to stay informed of our data protection practices.

10. Contact Us Regarding Privacy

If you have any questions, concerns, feedback, or legal inquiries regarding this Privacy Policy or our client-side architecture, please reach out to us:

• Email: privacy@curltoany.com
• General Inquiries: hello@curltoany.com
• Contact Form: Visit our Contact Page