Privacy

Nothing you type into a converter leaves your browser. There are no accounts here, no record of anything anyone has converted, and no way for us to read what's in your input box.

Two things on this site do talk to other companies. Page views are counted through Fathom, and the ads come from Google. Everything below is what that means in practice.

Every conversion here is JavaScript running on your own machine. Type into the Morse translator or paste a blob into the cipher identifier, and the letters are turned round by code that arrived with the page. No request goes out. There's nothing to send.

We test that rather than assert it. A script types the marker CANARY-7f3a9c into the converter on all 48 pages, changes a setting, clicks copy, downloads the output, then reads every request the browser made, 2,833 of them on the last run, looking for that marker as plain text, Base64, hex or percent-encoded. The build fails if it ever turns up.

One consequence is worth stating plainly. We can't recover anything for you, because we never had it.

Page views and the referrer that sent you, through Fathom Analytics. Fathom sets no cookies and builds no profile of you, so there's no consent banner for this part and nothing to opt out of.

Its script loads from cdn.usefathom.com, which means Fathom's servers see that request and the IP address it came from, the same as any other file your browser fetches. What you typed isn't in that stream. It never gets that far.

The site is paid for by display ads from Google AdSense. Google and the vendors it works with may store and read cookies or device identifiers in your browser to pick which ads you see, to cap how often you see the same one, and to tell whether anyone clicked.

Google describes that in its own note on how it uses information from sites that use its services, and you can change what it personalises for you at My Ad Center, which covers every site at once rather than this one.

The ad code loads after the converter is ready to use, and nothing from the converter is ever handed to it. It knows which page you're on. It doesn't know what's in the box.

You'll see a consent dialog before any ad loads. It comes from Google's certified consent platform and follows the IAB's Transparency and Consent Framework, which is what Google requires of every site showing its ads to you.

Say no and the ads go non-personalised. Every converter works the same either way. Your answer is kept in your own browser, so clearing site data for stringmash.com brings the dialog back if you want to change it.

The web server keeps one line per request: the IP address, the path asked for, the referrer and the browser's user-agent string. That's Caddy's standard access log, and it goes to the host's log stream, where it's read when a route breaks or 404s spike.

It isn't joined to the analytics and it isn't used to build a picture of anyone.

This page was last changed on 21 September 2026. If what the site does changes, this changes with it.

Anything you want to ask about the above goes to privacy@stringmash.com.