Privacy Policy

← Back to JSON Validator

Last updated: 26 April 2026

The short version: Your JSON content is processed entirely in your browser using JavaScript. It is never sent to our server, never stored, never logged, and never seen by us or any third party. You can verify this yourself by opening your browser's developer tools and watching the Network tab.

1. Who we are

This site is operated by Lucid Dreams, a Belgian sole proprietorship. Contact: via the website above. For privacy questions you can use the contact details listed there.

2. What data we process

2a. Your JSON content — never leaves your browser

The JSON Validator is a fully client-side tool. When you paste, type or upload JSON or a JSON Schema, all parsing, formatting and schema validation runs in JavaScript inside your browser. The content is held in your browser's memory only for as long as the page is open, and is discarded as soon as you close the tab.

We do not upload, transmit, log, store, analyse or share the JSON or schema content you work with.

Legal basis: No personal data is processed by us in this flow, so no GDPR legal basis is required.

2b. Anonymous usage statistics (server beacon)

After each successful action (validate, format, minify, schema check), the page sends a tiny anonymous "beacon" to our server with the following information — and nothing else:

We never log your IP address, browser fingerprint, the actual JSON content, schema content, file names, or anything else that could identify you or reveal what you validated.

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) — fully anonymous service quality monitoring with negligible privacy impact.

2c. Server access logs

Like any web server, our hosting provider records standard access logs containing your IP address, browser type, referring URL, and the pages you visit. These logs are used solely for server security and capacity planning, and are retained for a maximum of 30 days.

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR).

2d. Google AdSense (advertising cookies)

This website may display advertisements served by Google AdSense. Ads only load after you give explicit consent via the cookie banner. If you decline or have not yet chosen, no AdSense scripts are loaded and no advertising cookies are placed.

When you accept, Google may set cookies to personalise ads, measure ad performance, and prevent fraud. Google AdSense is a separate data controller; you can read their privacy policy at policies.google.com/privacy.

Importantly, Google AdSense never sees the content of your JSON. The ad scripts run in a separate scope and have no access to the textareas where you paste data.

Legal basis: Consent (Art. 6(1)(a) GDPR), obtained via the cookie banner. You can withdraw consent at any time by clearing site data in your browser.

2e. Third-party CDN scripts

To validate JSON Schema, we lazy-load the AJV library from the public jsdelivr.net CDN only when you open the Schema tab. Loading a script causes your IP address to be visible to the CDN (this is unavoidable for any public CDN). The script is open-source, signed, and serves the same code to every visitor.

If you prefer to avoid the CDN, simply do not use the Schema tab — the Validate and Format tabs work without it.

3. Cookies

This site uses a minimal set of browser storage:

The validator does not use a session cookie, because there is nothing server-side to keep state for.

4. Your rights under GDPR

Where we process personal data (limited to access logs and AdSense), you have the right to:

To exercise any of these rights, contact us via luciddreams.be.

5. Children

This service is not directed at children under 16. We do not knowingly process data of minors.

6. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. Substantial changes will be announced on the homepage.