Privacy Policy

This policy describes the current JoinJson homepage and explains the advertising placeholders supplied with the site. Advertising is not active: no Google AdSense or analytics script is loaded by the current configuration. The operator must review hosting, contact information, and consent integration before enabling advertising.

Pasted and uploaded JSON is processed locally

Parsing, syntax validation, merging, formatting, and result highlighting run in your browser. Pasted and uploaded JSON is processed locally and is not sent to a JoinJson processing server. The homepage does not save JSON, filenames, results, or input URLs in localStorage or cookies. Inputs remain in page memory while you work. Copy sends the result to your clipboard and Download creates a file only when you request it.

Clear all removes the working inputs and result from the interface. It does not erase downloaded files, clipboard history, browser backups, or data retained by browser extensions. Browser session restoration and device software are outside the app’s control. Avoid processing sensitive records on devices you do not trust.

Load from URL contacts the source host

Selecting Load in the From URL tab makes a browser request to the source host you specify. That host, and any redirect destination, may receive your IP address, the requested URL, and browser/network information. The request omits cookies and the page referrer. The source must use HTTPS and permit browser access through CORS. Downloads are limited to 20 MB and time out after 30 seconds. Loaded JSON is validated and then processed in browser memory; it is not uploaded to this site.

Do not use URLs containing credentials, access tokens, or confidential query parameters. Cancel aborts the local download but cannot recall a request already received by the source. A source’s own privacy policy governs its logs and handling of requests.

Hosting, storage, and external links

Serving the site requires the host to receive ordinary page and asset requests, which can include IP addresses, request times, and browser headers. These requests do not include pasted JSON or local file contents. Hosting retention and security practices depend on the production provider and must be confirmed by the operator. No analytics or error-reporting vendor is installed on the homepage.

Other guide pages can save theme and non-sensitive display preferences in browser storage. The current homepage does not load the legacy AI assistant or sharing tools. Following an external link contacts that destination; its policies apply. Emailing the operator, once a real address is configured on the Contact page, sends your message through email providers rather than the local merger.

Google AdSense cookies and third-party advertising

The site contains two labeled, manual advertising placeholders, not active advertisements. If Google AdSense is enabled after publisher and consent review, third-party vendors, including Google, may use cookies to serve ads based on a user’s previous visits to this website or other websites. Google’s use of advertising cookies enables Google and its partners to serve ads based on visits to this and/or other sites on the Internet. Advertising requests may also involve device or browser identifiers and network information.

Learn how Google uses information from sites and apps that use its services at Google’s partner-sites privacy disclosure. You can also read Google’s advertising technology information. These links do not load Google resources until you follow them.

Opt out of personalized ads

You may opt out of personalized advertising by visiting Google Ads Settings. You can opt out of participating third-party vendors’ use of cookies for personalized advertising through YourAdChoices. Availability depends on the vendor and region. Opting out of personalization does not necessarily remove all ads, and non-personalized ads may still use cookies for functions such as fraud prevention and frequency control.

Consent and regional choices

The script placeholders are not a consent management platform and do not grant consent. Advertising stays disabled until the operator configures a Google-certified CMP where required, including for users in the EEA, UK, and Switzerland, and implements applicable regional choices and withdrawal. A production CMP must provide the required vendor signals and a way to reopen privacy choices. The site must not infer consent from using the merger. Applicable US state opt-outs and Global Privacy Control handling must also be reviewed before deployment.

Any vendor script executing on the same page can technically access page content, including editor values. Local merging describes the app’s processing, not isolation from third-party scripts. Do not enable same-page advertising for a confidentiality guarantee; consider a separately isolated editorial advertising site. The present disabled configuration makes no advertising requests.

Changes and contact

This policy may change when the site’s features or vendors change. Review it before using newly introduced services. For questions, see the Contact page. The operator’s monitored contact email is awaiting configuration; that must be resolved before advertising review. Read the Terms of Use for service limitations.