JWT Lens — Privacy Policy

Last updated: 2026-05-30

JWT Lens is a Safari extension that decodes and verifies JSON Web Tokens. Your privacy is the core of its design.

We do not collect any data

JWT Lens does not collect, store, transmit, or share any personal data or usage data. Specifically:

No network requests. The extension never sends data anywhere. All decoding and signature verification happen locally on your device using the system's built-in cryptography (WebCrypto).
No analytics or tracking. There are no analytics SDKs, no telemetry, and no third-party services.
No accounts. No sign-in or registration is required.
No storage of your tokens or keys. Tokens you paste and any verification secret or public key you enter exist only in the extension popup while you are using it, and are discarded when the popup closes. Nothing is written to disk or to the cloud.

Permissions

JWT Lens requests only the activeTab and scripting capabilities. These are used solely so that the “Grab selection” button can read the text you have selected on the current page, and only when you tap that button. The extension has no background process and requests no broad website access.

Children's privacy

JWT Lens does not collect data from anyone, including children.

Changes to this policy

If this policy changes, the updated version will be posted at this URL with a new “Last updated” date.

Contact

For questions about this policy, contact: itoama@gmail.com