Privacy policy
What we collect when you visit this site or get in touch, why we collect it, and how to ask us to delete it.
Last updated: August 2026
This policy covers WebSync (websync.in). We keep it short and specific - it describes what this website actually does, not a generic template.
The short version
- We collect what you type into the contact form, so we can reply to you.
- We use analytics to understand how the site is used.
- We don't sell your data, and we don't run ads.
- You can ask us to delete your data at any time by emailing contact@websync.in.
Information you give us
If you submit the contact form, we receive the name, email address, service interest, and message you enter. This is delivered to our email inbox and used only to respond to your enquiry and, if it leads to work, to carry out that work.
If you contact us by email, phone or WhatsApp instead, we hold whatever you choose to share in that conversation.
We keep enquiry correspondence for as long as it's commercially useful - typically while a conversation is active and for a reasonable period afterwards in case you come back to us. You can ask us to delete it sooner.
Information collected automatically
Like most websites, our web server records standard technical information when you visit: IP address, browser and device type, the pages you request, and timestamps. This is used for security and to diagnose problems.
The free browser-based tools
This site also hosts a library of free tools (under /tools/) that run entirely in your browser. Whatever you paste, type, or drop into a tool - JSON payloads, JWTs, product CSVs, images, anything - is processed on your own device and never transmitted to us or anyone else. There is no server in the request path for any tool's actual processing; that part of the site is static files, same as the rest of it. A small number of tools that genuinely can't work client-side (an IP lookup, fetching another site's raw HTML or headers, a DNS lookup) call a narrow server endpoint of ours for just that one piece of data - each of those tools says so directly on its own page.
Analytics and third-party services
We use the following third-party services. Each has its own privacy policy, linked below.
Google Analytics
Used to understand which pages people visit and how they arrive. Google's script loads on every visit (so tools like Google Search Console can verify it's installed), but it starts in a denied state via Google's Consent Mode and stays there - no cookie is set and no visit data is sent to Google - unless you accept below. Once accepted, it sets cookies and processes information about your visit, including a truncated IP address, and tells us about visitor behaviour in aggregate - it does not tell us who you are.
Microsoft Clarity
Used to see how pages are actually used - where people click, how far they scroll, and where they get stuck. Clarity's script loads on every visit for the same domain-verification reason as Google Analytics above, but our Clarity project has Strict/Consent Management mode enabled, which blocks all recording until we send it an explicit signal that you've accepted below - declining means Clarity never records anything about your visit. Once accepted, it records anonymised session activity and produces heatmaps. Text you type into form fields is masked by Clarity and is not visible to us in recordings. On the free tools specifically, every tool's input area, output area, file drop zone, and result table is masked from Clarity by default, at the container level - this is structural, not a per-field checklist that could have gaps, and it's enforced by an automated check that fails our own build if that masking is ever accidentally removed. Masked areas appear as blank blocks in any session replay, never as the text or files you actually worked with.
Ahrefs Web Analytics
Used to understand aggregate traffic - which pages get visited and roughly how much. Unlike Google Analytics, it is cookie-free: it doesn't set a cookie, doesn't track you across visits, and doesn't process any personal data. Because of that, it runs on every visit rather than being gated behind the analytics choice below - there's no personal data collection for that choice to gate.
Google reCAPTCHA
Used on the contact form to tell humans from bots. reCAPTCHA collects hardware and software information and behavioural signals from your device and sends them to Google for analysis. Its use is subject to Google's Privacy Policy and Terms of Service.
Fonts
We load typefaces from Google Fonts, which means your browser makes a request to Google's servers when the page loads.
These services only load if they have been configured. If analytics keys are not set, no analytics or reCAPTCHA scripts are served at all.
What's stored on your device
- Analytics consent choice(localStorage) - remembers whether you accepted or declined, so you're not asked every visit. Clear this site's local storage in your browser settings to reset it - the consent banner will appear again on your next visit.
- Recently used tools(localStorage) - on the free tools, a shortcut list of tools you've opened recently, shown in the tools sidebar. This is notanalytics: it's never transmitted anywhere, works the same whether or not you accept analytics, and is kept for 90 days before being automatically dropped. Password Generator, Hash Generator and JWT Debugger are deliberately excluded from this list, since even the fact that those were opened is mildly sensitive on a shared device. Clear it any time by clearing this site's local storage in your browser.
- Theme preference (localStorage) - your light/dark/system choice.
Cookies
This site sets no cookies of its own. Cookies present are set by the third-party services above, primarily Google Analytics. You can block or delete cookies in your browser settings; the site will continue to work normally.
What we don't do
- We don't sell, rent or trade your personal data.
- We don't run advertising or advertising trackers.
- We don't add you to a mailing list because you submitted an enquiry.
- We don't ask for payment details on this website.
Your rights
Depending on where you live - including under India's Digital Personal Data Protection Act, 2023, and the GDPR if you are in the EU or UK - you have rights over your personal data. These generally include the right to access what we hold, correct it, ask for it to be deleted, and withdraw consent.
To exercise any of these, email contact@websync.in. We'll respond within a reasonable period, and we won't ask you to justify the request.
Data security
The site is served over HTTPS. Enquiry data is delivered to an email inbox protected by the provider's own security controls. No system is perfectly secure, so we keep what we collect to a minimum - the contact form asks for nothing beyond what's needed to reply to you.
Children
This is a business services website and is not directed at children. We don't knowingly collect data from anyone under 18.
Changes to this policy
If we change how the site handles data, we'll update this page and the date at the top.
Contact
Questions about this policy, or about data we hold:
Email: contact@websync.in
Phone / WhatsApp: +91 86559 88773