# Privacy

just trees is operated by Lovelace @ WYV3RN. This notice covers justtrees.pages.dev and its param, dump and json subdomains. For privacy questions, email justtreessupport@lovelace.yv3.uk.

The query-string, PHP dump and JSON parsers run in your browser. Our parsing code does not upload what you paste to a parsing server, visit pasted URLs or execute generated code. There are no user accounts or cloud-saved documents. Cloudflare hosts the site and handles web requests, including through an edge worker used to serve pages and documentation.

Local parsing does not make this a safe place for secrets. The pages load Cloudflare Web Analytics and, unless you turn them off, Google advertising scripts. Third-party JavaScript can access page content, including editor contents. Do not paste passwords, access tokens, confidential dumps or other sensitive information.

Share links contain the original input in the part of the URL after the # character. This fragment is not sent to the web server as part of the page request. It is compressed, not encrypted, and anyone with the link can recover the input. A dump share link includes properties hidden in the display. Switching between tools can also carry editor input in a fragment.

The app removes imported share data from the address bar, but that does not erase copies held in messages, clipboards, browser history or elsewhere. A request's path and ordinary query string can reach the hosting provider before the page removes them. Do not put sensitive information in a URL.

The app saves editor state, including raw input, in sessionStorage under justtrees-state. This is separate for each site origin and browser tab and allows work to be restored in that tab. Browsers normally clear sessionStorage when a tab's session ends, but session restoration can preserve it. Clearing one editor is not a universal erase of browser storage.

The theme preference uses a justtrees-theme cookie and localStorage under paramtree-theme. The Google ads preference uses an ads cookie with an off or on value. These cookies are shared across the four hosts, have a one-year lifetime and use Secure and SameSite=Lax. The JSON code-language choice is stored in localStorage under justtrees-code-language. LocalStorage has no expiry set by this app and remains until removed by you or your browser.

The app also uses service workers and Cache Storage to keep site code, assets and documentation available offline. Each host has its own cache. The main page tries to prepare the other three hosts through hidden frames. The app's offline cache does not include Google ads, Cloudflare analytics or externally hosted fonts. Your browser may separately cache network resources. Offline mode does not erase stored editor state.

Cloudflare Web Analytics receives page-view and performance information. Its reports include page paths, referrers, country and browser or device information. Cloudflare says this analytics service does not use cookies or localStorage or fingerprint visitors for analytics. This statement describes the analytics service, not every cookie or storage feature on this site. Cloudflare also processes network information needed to deliver and protect the website.

Google advertising is enabled by default. Ad requests involve connections to Google and may involve its advertising partners. Google can receive network and device information, including an IP address, and its scripts and ad content may be cached by your browser. The site does not currently include a consent-management dialog, and we do not promise that every ad request is served in Google's limited-ad mode.

If Google serves limited ads, that mode does not use personal data to personalise the ads. Google says that when programmatic limited ads are enabled, it uses cookies, localStorage and, where available, Shared Storage only for invalid-traffic detection in that mode. This is conditional on Google's serving mode and account settings, not a claim that this storage is always used or never used on this site. Google's explanation is at https://support.google.com/adsense/answer/14210870?hl=en.

You can stop this site's Google ad loader by choosing “Turn off Google ads” in the footer, then “Turn off ads” in the dialog. The page reloads and stores ads=off. This preference applies across the four hosts while the cookie remains available. “Turn Google ads back on” reverses it. Turning ads off does not disable Cloudflare analytics or font requests, remove storage already created by Google or affect other sites.

Fonts are requested from Bunny Fonts. As with any external request, the provider receives the connection information needed to deliver the files. Bunny Fonts says it stores no personal data or request logs. Its explanation is at https://fonts.bunny.net/faq.

Browser-local WebMCP tools accept explicit arguments and return results without our handlers uploading them. Your browser agent or its provider may process those arguments and results under its own policies.

To remove stored site data, use your browser's site-data controls for the main host and all three subdomains. This can remove editor state, preferences and offline caches, and may re-enable ads by deleting the ads=off cookie. Removing site data cannot recall shared links, downloaded files or information already received by another service.

If you email support, your email address, message and any attachments are processed to handle your enquiry. Please do not send secrets or confidential dumps. Contact justtreessupport@lovelace.yv3.uk with questions or requests concerning personal information you have sent us.