What happens to the data you put into a tool
Nothing leaves your browser. Every encoder, decoder and converter on base64hub is plain JavaScript that runs on your device. When you paste text, drop a file or paste an image, the browser reads it into memory, the script transforms it, and the result is shown on the same page. Files are read with the browser’s File API, which gives the page access to the file you picked and nothing else.
We do not have an upload endpoint, a database of inputs, or an API that receives your content. There is nothing on our side that could store it.
How the browser enforces it
Every page is sent with a Content Security Policy whose connect-src directive allows only /cdn-cgi/rum, the address where Cloudflare Web Analytics receives page views, on base64hub itself and on cloudflareinsights.com. The browser blocks every other fetch, XHR, WebSocket and beacon request from the page. Scripts may only load from base64hub itself and from Cloudflare’s analytics script host, and the page cannot open frames to other sites. The tools never send your input anywhere, and if a bug in one tried to send it to another server, the browser would refuse.
Results you download are created on your device as a local file (a blob: URL) and saved by your browser. Previews of images, PDFs, audio and video use the same local copies.
Check it yourself
- Open a tool, then open your browser’s developer tools and switch to the Network tab.
- Paste some text or drop a file into the tool and watch the list. You will see no requests carrying your data. The only other request is the page view that Cloudflare’s script reports to
/cdn-cgi/rum. - Or disconnect from the internet after the page has loaded. The tools keep working.
You can also read the policy in the page source: look for the Content-Security-Policy meta tag in the <head>.
What we do not collect
- No accounts, no sign-up, no email addresses.
- No tracking or advertising cookies.
- No input history. Close the tab and the data is gone.
The only thing the site stores is your theme choice (light or dark), kept in your browser’s local storage under the key b64mode. You can clear it any time in your browser settings.
What any website receives
Like every website, base64hub is delivered by web servers and a content delivery network (Cloudflare). To send you a page they process standard request data: your IP address, the URL you requested, the time, and your browser’s user agent. This data is used to deliver the site and protect it from abuse, and it never includes what you type or drop into a tool, because that never leaves your device. From the same request data Cloudflare counts daily totals, such as the number of requests and visitors, and we look at those totals to see how the site is used. Cloudflare also adds its Web Analytics script to every page; it sets no cookies. We see only the totals, never individual visitors.
Contact
Questions about privacy: privacy@base64hub.com.
FAQ
Can base64hub see what I encode or decode?
No. The tools are JavaScript that runs on your device. The page may not make network requests other than Cloudflare’s page-view count, so the data has no way to reach us or anyone else.
Do the tools work offline?
Yes. Once a tool page has loaded, you can disconnect from the network and it keeps working, because nothing in it depends on a server.
Do you use cookies?
No. The site remembers one setting, light or dark theme, in your browser’s local storage. It never leaves your device.