Data handling depends on the tool you use. Local tools keep your input in the browser, network lookups run through a rate-limited VoriTools endpoint, and only an optional account stores anything on the server.
Tools that keep your input in the browser show a “Runs locally in your browser” note under the page title. Examples include JSON inspection, code generation, JSONPath, JSON Diff, cron preview, ENV parsing, mock-data generation, local log analysis, Docker Compose checks, and HMAC JWT operations.
For these pages, the tool code is designed not to submit pasted content, selected files, signing secrets, or generated output to VoriTools. Your browser may still retain data in its own form history or clipboard according to its settings.
Some utilities necessarily work with a URL, remote host, public lookup, or external browser capability. Those pages can send the value you provide to the endpoint required to deliver that feature. Read the notice on the specific page before entering credentials, private endpoints, personal data, or production secrets.
Do not paste confidential credentials, private keys, customer data, or production tokens into a tool unless the page clearly says it is processing the content locally and that behavior fits your risk requirements.
The global tool finder stores recent tools, pinned tools, and a light/dark preference in this browser's local storage. They stay on this device unless you sign in and choose to synchronize the corresponding workspace preference.
Downloading a generated fixture or copying tool output is initiated by your browser. VoriTools does not need an account for these local flows.
VoriTools uses Google Analytics 4 to measure page visits and understand which public tools are useful. Google Analytics receives standard page-view, referrer, browser, device, and language metadata under Google's own data-handling terms.
VoriTools does not add pasted text, selected files, code, secrets, generated output, custom website shortcuts, or workspace contents to Google Analytics events.
VoriTools works without an account. If you create one, the server stores your email address, a one-way password hash, account timestamps, and the workspace preferences you choose to sync: favorite tool identifiers, custom group names and order, custom shortcut names, web addresses and cached-icon references, theme, language, homepage settings, and—only when enabled—recent tool identifiers.
Tool inputs, pasted code, selected files, secrets, generated output, and clipboard contents are never included in workspace sync.
When you use “Fetch details” for a website shortcut, the VoriTools server requests only the public page and favicon needed to detect its display name and icon. Private, local and reserved-network addresses and non-standard ports are blocked; pages are capped at 512 KiB, icons at 128 KiB, at most three redirects are followed, and a signed-in account can make 30 metadata lookups per 10 minutes. The page body is not added to your workspace, and accepted favicon bytes are cached behind a same-origin VoriTools URL.
You can permanently delete your account and its synced workspace from My Workspace. Signing out does not erase browser-local preferences; use your browser's site-data controls to remove those.
VoriTools is a utility site, not a secure secret vault. The data handling note shown on the tool you are using is the most specific description of that tool's behavior.