Privacy Policy

Last updated: August 2026

DevToolbench (devtoolbench.dev) has no accounts, no login, and no first-party data storage — there is no database. Below is exactly what each tool does with what you type into it, tool by tool.

Breach Checker

Password check

Your password is hashed locally in your browser using SHA-1. Only the first 5 characters of that hash are ever sent over the network — to the HaveIBeenPwned Pwned Passwords API. This technique is called k-anonymity: the API returns the list of all hash suffixes that share your 5-character prefix, and your browser matches the rest locally. The full password and the full hash never leave your device.

Email check

Unlike the password check, your email address is sent to the XposedOrNot API over HTTPS to run the breach lookup. That is the only way this check can work. If you're not comfortable with that, don't use the email check.

Speed Test

The URLs you enter are sent to this site's own serverless function (on Cloudflare Pages), which forwards them to Google's PageSpeed Insights API to run the audit. We store nothing; the URLs are processed in memory and discarded. Google's API receives your URLs as part of running the test.

Fake Data Generator

100% local. Nothing you configure or generate is ever sent anywhere. All data is produced in your browser by an open-source library bundled at build time — there is no runtime call to any third party.

Analytics

We use Microsoft Clarity, a free, cookieless analytics tool, to understand how the tools are used — which pages people reach, where they scroll, and where they get stuck. Clarity sets no cookies, stores no personal data, and masks all form inputs by default, so anything typed into the breach checker (including passwords) is never recorded. Session data is aggregated and anonymous. If you prefer to opt out, blocking third-party scripts in your browser also disables Clarity.

Advertising

The site is ad-supported. Ad slots may be filled by third-party ad networks, which set their own cookies subject to their own policies. This site itself sets no cookies — the only first-party analytics is the cookieless Microsoft Clarity described above.

Questions? Open an issue on the site's GitHub repository.