YAMLTools logo

Privacy Policy – YAMLTools.DEV

YAMLTools.DEV is a SaaS operated by IPalSeb Studio. This policy explains what we collect, why we collect it, which services we rely on, and how you can control your data. We default to minimum data and maximum transparency.

1. Anonymous use of the tools

The YAML Visualizer, Syntax Checker and Format Converter are free to use without an account. When you use them anonymously:

  • All parsing, validation and rendering happens in your browser. Your YAML content never leaves your device.
  • We do not store, transmit or log your YAML content server-side.
  • No account, email or personal information is required.

2. Account data (when you sign up for Pro)

Creating an account unlocks saved diagrams, share links, HD exports, the public API and the live README badge. To run that, we need to store:

  • Email address, display name and optional avatar URL.
  • Password hash (if you sign up with email/password) or OAuth identifiers (if you sign in with GitHub or Google).
  • Session tokens so you stay logged in across visits.
  • Your saved diagrams: YAML content, visualization settings, title, visibility, and share-link tokens you generate.
  • Technical logs (IP, user agent, timestamps) kept briefly for abuse prevention and debugging.

3. Billing data (Pro subscribers)

Payments are handled by Polar as our Merchant of Record. Polar collects the data needed to process your payment, issue invoices and comply with tax rules:

  • Name, billing address, country and (where applicable) VAT/tax ID.
  • Payment method details — stored and processed entirely on Polar's side. We never see your card.
  • Order and invoice history. You can access it any time from the customer portal linked from your billing page.
  • We keep a minimal record on our side: Polar customer ID, subscription status, current plan and billing period.

4. Cookies and local storage

We use the minimum set of technologies needed to make the site work and to improve it:

  • Local storage remembers preferences such as theme (light/dark) and language.
  • Session cookies keep you signed in when you have an account. These are essential and cannot be disabled without logging out.
  • Google Analytics and Microsoft Clarity may use cookies to collect anonymous usage data. These cookies help us:
    • Understand how visitors interact with our website.
    • Measure traffic and improve user experience.
  • You can manage your cookie preferences through your browser settings or by rejecting optional cookies in our consent banner.

5. Usage analytics (Google Analytics and Microsoft Clarity)

We use Google Analytics and Microsoft Clarity to understand how visitors use the site and improve it:

  • Google Analytics collects anonymous data such as pages visited, session duration, browser type, operating system and screen resolution. It only loads after you accept cookies in our consent banner.
  • Microsoft Clarity collects anonymous interaction data (clicks, scrolls, heatmaps and session replays). Clarity runs by default in cookieless mode with an ephemeral session identifier and cannot track you across sessions. If you accept cookies, Clarity is upgraded to full mode with persistent cookies, and — if you are signed in — your sessions are tagged with your user ID so we can diagnose product issues end-to-end. Identification never happens without consent.
  • No personally identifiable information is collected. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on, and rejecting cookies in our consent banner keeps Clarity in cookieless mode.

6. Third-party services

YAMLTools.DEV relies on a small set of third-party providers, each with a specific purpose:

  • Hetzner – Infrastructure and servers (EU-hosted).
  • Polar – Payment processing and Merchant of Record. Handles billing, taxes and invoices.
  • Better Auth + Resend – Account authentication and transactional email (magic links, password reset).
  • S3-compatible object storage (MinIO) – Diagram exports and badge images.
  • GitHub, Google – OAuth sign-in providers.
  • Google Analytics and Google Search Console – Web analytics and SEO diagnostics.
  • Microsoft Clarity – Session analytics, cookieless by default.

All third-party providers comply with applicable European data protection regulations (GDPR). Microsoft Clarity is covered by the EU-US Data Privacy Framework.

7. Your rights

You are in control of your data at any time. You can:

  • Access and review your profile, saved diagrams and subscription from the dashboard.
  • Export your account data on request — email us and we'll send you a machine-readable copy.
  • Rectify any information that is inaccurate directly from your account settings.
  • Delete your account at any time. Deletion wipes your profile, diagrams and share links. Billing records are kept only for the legally required retention period.
  • Withdraw consent for analytics cookies via the consent banner at any time.

8. Changes to this policy

We may update this privacy policy as the product evolves. Material changes will be announced on the site or by email to active Pro users. Continued use after changes indicates acceptance of the updated policy.

9. Contact us

If you have any questions about this privacy policy or how we handle your data, reach out through our contact page

Last updated: April 2026