Privacy Policy
Last updated: May 5, 2026
Stax ("we", "us", or "our") operates https://stax.tools. This page explains what data we collect, what we don't collect, and how the site is built to protect your privacy by default.
The short version
- Tool input is never sent to our servers. Every tool runs entirely in your browser. Your JSON, files, code, or calculations stay on your device.
- We use anonymous analytics. Google Analytics 4 and Microsoft Clarity collect aggregate, anonymous data about how visitors use the site (page views, scroll depth, rage-clicks). They do not see your tool input.
- We display ads from Google AdSense. Ads fund the free tools. EU/EEA visitors see non-personalized ads by default until they accept cookies.
- No accounts required for free tools. You can use everything on Stax without ever signing up.
Data we don't collect
- We do not collect or store the content you enter into any tool (e.g. JSON you format, files you upload, calculations you run).
- File processing tools (PDF, image) load files into your browser's memory only. Files are never uploaded to our servers.
- We do not sell, rent, or share personal data with third parties for marketing.
- We do not knowingly collect data from children under 13 (or under 16 in the EU/EEA).
Data we do collect
- Anonymous usage analytics: page URL, referrer, device type, country (derived from IP, not stored long-term), and aggregate event counts (e.g. "tool_used"). Provided by Google Analytics 4 (Measurement ID redacted) and Microsoft Clarity.
- Performance data: Vercel Analytics and Speed Insights collect anonymized Core Web Vitals (LCP, INP, CLS) so we can find and fix slow pages.
- Advertising signals: when you accept cookies, Google AdSense may set cookies to serve relevant ads and measure ad performance. See the "Advertising" section below for details.
Cookies we set
| Cookie | Purpose | Duration |
|---|---|---|
| stax:cookie-consent | Stores your Accept/Decline choice for analytics & ads. | Browser localStorage (until cleared). |
| NEXT_LOCALE | Remembers your selected interface language. | 1 year. |
| _ga, _ga_* | Google Analytics 4 — distinguishes unique visitors. Set only after consent. | 2 years. |
| _clck, _clsk, CLID | Microsoft Clarity — session replay & heatmaps. Set only after consent. | 1 year. |
| __gads, __gpi, IDE | Google AdSense — ad delivery & measurement. Behavior follows your consent state. | Up to 13 months. |
Consent management (Google Consent Mode v2)
We use Google Consent Mode v2 to respect your tracking preferences from the moment you arrive. Until you click Accept on the cookie banner, the following defaults apply:
- analytics_storage = denied: Google Analytics receives a privacy-safe "cookieless ping" with aggregated, anonymized data only — no client identifiers, no cross-session tracking.
- ad_storage / ad_user_data / ad_personalization = denied: Google AdSense serves only non-personalized ads (NPA) and does not set advertising cookies.
- Microsoft Clarity: session recording is disabled until you accept.
When you click Accept, we update the consent signals to grantedand the analytics & ad networks may set cookies and personalize content. You can revoke this at any time by clearing your browser's storage for stax.tools — the banner will reappear on your next visit.
Advertising (Google AdSense)
We use Google AdSenseto display advertisements that help fund the free tools. AdSense is operated by Google LLC and Google Ireland Limited (collectively "Google").
- Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website and other websites.
- Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to stax.tools and other sites on the Internet.
- You may opt out of personalized advertising by visiting Google Ads Settings.
- You may opt out of third-party vendor use of cookies for personalized advertising by visiting aboutads.info (US) or youronlinechoices.com (EU).
- For more information on how Google uses data, see How Google uses information from sites or apps that use our services.
Pro users (when Pro launches) will see no ads on any tool page.
AI features (when applicable)
Some tools offer optional AI-assisted features (e.g. "Explain this regex"). When you click an AI button, the relevant input is sent to a third-party AI provider (OpenAI) for processing. Inputs are truncated to 15,000 characters and are not stored on our servers beyond a short-lived cache used to speed up identical requests. AI features are always opt-in — you have to click a button to trigger them.
Your rights and choices
- Withdraw consent at any time by clearing site data for stax.tools — the banner will reappear and the consent defaults reset to denied.
- Use an ad blocker. We do not detect or restrict ad blockers.
- EU/EEA, UK, Swiss residents have GDPR/UK-GDPR rights to access, correct, or delete personal data. Because we don't hold accounts or store input, the only personal data we process is contained in third-party analytics and ad cookies set on your own device — clear them via your browser to delete.
- California residents can request access or deletion under the CCPA. Same as above, deletion happens at the browser level.
Third-party services we use
- Google Analytics 4 — analytics. Google Privacy Policy.
- Google AdSense — advertising. Google Privacy Policy.
- Microsoft Clarity— session replay & heatmaps. Microsoft Privacy Statement.
- Vercel — hosting, analytics, and Speed Insights. Vercel Privacy Policy.
Changes to this policy
We may update this policy as the site evolves (for example, when accounts and Pro features launch). The "Last updated" date at the top of this page reflects the most recent change. Material changes will be announced on the site.
Contact
Privacy questions? Reach us via the contact page.