safepaste

Free developer tools

Paste it. Read it. Nothing leaves your tab.

These are small tools for working with data, built so that you can trust them. They run entirely in your browser, they have no way to send what you paste anywhere, and there is nothing to sign up for. You will not find any advertising or analytics on them either.

Open the base64 tool

The tools

Simple tools that keep your data safe.

Each tool is a single self-contained file. You can save it to disk and it keeps working with no network at all.

Why bother

The things you paste into a converter are not harmless.

It might be a token, a config file, a customer record, or a response body from a system that is misbehaving. People paste all of it into whatever page a search turns up, and that page is usually funded by advertising.

The browser enforces it

Every page ships connect-src 'none', which makes fetch, XMLHttpRequest, WebSocket, EventSource and sendBeacon fail at the browser level. Not by convention. By policy.

Nothing is remembered

Nothing is kept in cookies, local storage, session storage or IndexedDB. There is no account to make and no preference to save. Close the tab and there is nothing left behind.

No ads, no analytics

SafePaste does not make money from your attention, so nothing here wants to know who you are. There are no ads, no analytics scripts and no trackers on any page, and nothing is keeping count of what you paste.

Do not take our word for it

Check it yourself in about a minute.

  1. Open a tool, then open your browser's developer tools.
  2. Switch to the Network tab and reload the page.
  3. Paste something in and use it. The list should show the document itself and nothing else, however long you keep going.
  4. While you are there, look at View Source. The policy is in the head of the page and the whole application is in the same file.

These are free, and they stay free.

There is no paid tier and nothing is being upsold, because the moment a tool like this has a business model built on attention, the incentives point the wrong way. If they save you some time, you can make a donation to show your appreciation.

Support SafePaste

What happens to what you paste

Nothing happens to it beyond what you asked for. Every SafePaste tool converts what you give it inside your own browser tab, and it is gone as soon as you close the tab. There is no account, no database and no analytics, so there is nothing for it to be stored in.

How your browser enforces this

Every page in the network ships a Content Security Policy of connect-src 'none'. That makes fetch, XMLHttpRequest, WebSocket, EventSource and sendBeacon fail in the browser itself, whatever the code on the page tries to do. Images and fonts are restricted to data that is already inside the file, and form-action 'none' closes form submission as a way out.

The build separately rejects the capabilities that policy cannot reliably disable, including WebRTC and programmatic navigation, and then checks the finished file. It also fails if a page gains localStorage, sessionStorage, IndexedDB, a cookie or a service worker, so if a page ever gained one of them, the build would fail before that page could be published.

What the host can see

These pages are served by Cloudflare Pages. Like any web server, it sees the request for the page itself, which includes your IP address, the name and version of your browser, and the time of the request. That happens before any of the page's own code runs, and it is the same for every website you visit. What it does not see is anything you paste, because nothing you paste is ever part of a request.

Cookies, storage and tracking

Links to other sites

The footer links to Flytrap Industries, and the page offers a Stripe donation link. Neither is contacted unless you click it. They carry no query string and no referrer, so following one tells the destination nothing about what you were doing here. If you do donate, Stripe handles that payment under its own privacy policy and SafePaste never sees your card details.

Working offline

Save any tool to disk and open it again. Each one is a single self-contained file, so it works with no network at all, including on a machine that has never been connected to one.

This policy describes the pages it is part of. It ships inside them, so the copy you save to disk carries it too.