1. Information we collect
FormatArc is designed so that user-provided conversion content such as JSON, YAML, and CSV is not normally transmitted to or stored on our application servers during the standard workflow. However, basic technical data such as IP address, browser type, referrer, and access time may still be recorded by hosting infrastructure or CDN providers as part of normal web delivery logs.
2. How input data is handled
Formatting and conversion currently run inside the user's browser. As a result, FormatArc does not intend to collect, review, or retain the text pasted into the editor or the output generated by the tool as part of ordinary service operation. That said, we cannot control data handling performed by the user's own browser extensions, device settings, corporate network tools, or similar local environments.
3. Cookies and display preferences
The site uses cookies to remember the selected language (formatarc_locale) and the chosen visual theme (formatarc_theme). A short-lived region cookie (formatarc_region, max age 24 hours) is also set at the CloudFront edge only for visitors located in the EEA, the UK, and Switzerland. These are strictly necessary cookies for site operation and are not used for ad profiling. If cookies are disabled or deleted in the browser, these preferences may no longer persist between visits.
4. Analytics, ads, and third-party services
FormatArc uses Google Analytics 4 (gtag.js, served via googletagmanager.com) to collect anonymous, aggregated usage statistics — page views, basic device/browser information, referrer, and tool-level interaction events such as conversion runs and copies. Input/output text is never sent. For visitors located in the EEA, the UK, and Switzerland we apply Google Consent Mode v2 with a default of denied and load no analytics cookies until the visitor clicks Accept on the on-site consent banner. Declining consent does not affect core functionality of the tools. For visitors from other regions (such as Japan or the United States), analytics is enabled on the basis of acceptance of this privacy policy; you can opt out at any time using the official Google Analytics Opt-out Browser Add-on or a privacy extension. Additional analytics, advertising, or error-tracking services may be introduced in the future; if so, this section will be updated.
5. Retention and security
The locale and theme cookies last up to one year; the region cookie lasts 24 hours. Google Analytics 4 event data is managed under Google's default retention period (currently 14 months). The record of your consent choice (formatarc_consent_v1) is stored in your browser's localStorage and persists until you clear it. Access logs or other technical records generated automatically by hosting platforms or CDN providers are managed according to the relevant provider's retention and operational policies. FormatArc takes reasonable measures appropriate to a lightweight utility site to reduce the risk of tampering, misuse, or operational issues.
6. For visitors in the EU/EEA, UK and Switzerland
If you access this site from a jurisdiction covered by the EU GDPR, the UK GDPR + PECR, or the Swiss revised Federal Act on Data Protection (nFADP), the following additional terms apply. (a) Legal basis — server access logs are processed under GDPR Art. 6(1)(f) legitimate interest (stable operation and abuse prevention). Analytics cookies including Google Analytics 4 are processed under GDPR Art. 6(1)(a) consent, captured via the on-site consent banner. (b) Your rights — under GDPR Art. 15–22 you have the right to access, rectification, erasure, restriction of processing, data portability, objection, and not to be subject to automated decision-making. You may withdraw consent at any time (if the banner does not reappear, clear `formatarc_consent_v1` from your browser's localStorage); withdrawal does not affect the lawfulness of processing carried out before withdrawal. (c) International transfers — when Google Analytics 4 is enabled, your data is transferred to Google LLC in the United States. That transfer relies on the EU–US Data Privacy Framework, recognised by the European Commission's adequacy decision of 10 July 2023. (d) Right to lodge a complaint — you may lodge a complaint with the data protection authority of your country of residence (each EU member state's DPA, the UK ICO, or the Swiss FDPIC). (e) EU representative — FormatArc is a small, free utility operated outside the EU and has not appointed a representative under GDPR Art. 27 at this time. For any GDPR-related questions, please contact us directly at the address below.
7. Policy updates and contact
This policy may be revised to reflect product changes, legal requirements, or operational updates. When important changes are made, the content on this page will be updated. For questions about this policy, data-subject rights requests, or any other privacy matter, please contact info@m-naoki-m.com.