Privacy Policy
StrictJSON is a small tool with a small footprint. It does not ask you to create an account, it shows no advertising, and it runs no advertising trackers. This page describes, in plain terms, what happens to the data you type in — and what never happens to it. It reflects how the tool actually works today.
What we send
When you click Generate, the tool sends exactly two things to the AI providers that power it: the description you typed, and the output format you selected (Zod, Pydantic, or JSON Schema). Nothing else is sent — no name, no email address, no browsing history, no account information.
The request goes to the providers’ APIs in turn — Google Gemini, Groq, then OpenRouter — until one of them returns a usable result. The server’s own API keys for those providers live in a configuration file on the server (strictjson-config.php) and are never sent to your browser or exposed in any response. If a provider fails, the next one in the chain is tried; the generated output is checked on the server, and if it has a known quality gap, one repair attempt is made with the next provider.
Rate limiting
The free tier allows 10 generations per day, per IP address. To enforce that limit, the server keeps a small counter file for each visitor, named data/rate-<hash>.json, where <hash> is the MD5 hash of the visitor’s IP address. Your IP address itself is never stored in plain text, and the counter file holds only a date and a count. The counter resets each day. There is no other tracking on the server: no logs of what you typed, no analytics profile, no fingerprinting.
Your API key
If you bring your own OpenRouter key (BYOK) to generate beyond the free limit, that key is stored only in your own browser, in localStorage. It is never sent to the StrictJSON server, and it is sent nowhere else except to OpenRouter when you click Generate. To delete it, simply clear the key field in the tool — nothing is kept on our side, because nothing was ever sent to our side.
Your history
Your generation history — your recent descriptions and results — is stored only in your browser, in localStorage (the most recent 20 generations). It is never uploaded to the server. Clearing your browser data removes it. The instant examples shown on the site run entirely in your browser and never leave it.
What we never collect
- No accounts: there is nothing to sign up for, and no password or profile is stored.
- No advertising and no advertising trackers.
- No email addresses are kept. If you write to us, your email is used only to answer you.
- No IP addresses in plain text, no location data, and no record of the descriptions you generate on the server.
Contact
Questions about this policy, or about how StrictJSON handles your data, can be sent to denis@denislacombe.com.