TL;DR — Tool inputs are never stored. We don't track you, sell your data, or use advertising cookies. Anonymous use is fully supported without an account.
HeoLab (“we”, “us”, or “our”) operates heolab.com (the “Service”). This Privacy Policy explains what data we collect, why we collect it, and how we protect it.
The short version: Most HeoLab tools process data entirely in your browser or transiently on our servers with zero retention. We don't sell your data. We don't track you across the web. We use only what we need to make the service work.
When you use a developer tool (JSON formatter, JWT decoder, Base64 encoder, etc.), your input data is processed transiently. We do not log, store, or retain your tool inputs or outputs. Processing may happen in your browser or on our servers — either way, no content is persisted.
We collect anonymized, aggregated usage data to understand which tools are popular and how the service is used. This includes:
Raw IP addresses are never stored. Only a one-way hash is retained, making it impossible to reverse to your actual IP.
If you create an account, we collect your email address, display name, and authentication data via Supabase Auth. This is required to provide account features (saved items, history, API access). We store:
If you explicitly save a tool result, we store that input and output linked to your account. You can delete any saved item at any time from your dashboard.
When you use AI-enhanced features, we record token usage (not your content) for cost monitoring and rate limiting. The content you submit to AI enhancement is sent to our AI provider (currently OpenAI) under their privacy terms. We do not store your AI prompts or responses.
Our servers automatically record HTTP request logs including request path, response status code, and response time. These logs are retained for up to 7 days for debugging and are then deleted automatically. They do not contain tool input content.
We use collected data solely for:
We will never use your data for advertising profiling, resell it to third parties, or use it for any purpose not listed above.
We share data with third-party services only as required to operate:
We will disclose data if required by law, court order, or to protect the rights and safety of our users.
Depending on your location, you may have rights under GDPR, CCPA, or other privacy laws. Regardless of law, we honor the following for all users:
To exercise any of these rights, email trongngo08082002@gmail.com with the subject line “Privacy Request”. We respond within 30 days.
We take security seriously:
While we implement strong safeguards, no internet service is 100% secure. Please do not submit sensitive production secrets (API keys, database passwords) to any online tool.
HeoLab is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has submitted personal data, contact us and we will delete it promptly.
We may update this policy as the service evolves. Material changes will be communicated by updating the “Last updated” date and, for registered users, by email notification.
Continued use of HeoLab after changes constitutes acceptance of the updated policy.
Privacy questions or data requests: trongngo08082002@gmail.com. You can also use the contact form.