Privacy Policy

This is a personal website. There are no accounts, user registrations, or newsletters. I never rent or sell your personal data. The only personal data I receive is what you send me yourself: an email, or a purchase (below).

• Analytics: this site uses Google Analytics to count visits and see which pages are read. It sets its own cookies in your browser and tells Google the pages you view and what you do on them (the links and buttons you press, how far you scroll, a note read to its end, a copy made, how the games and tools are used), with your browser (and whether it says a program is driving it), device and a rough location. Never what you type. Google may also use this data to improve its own products and services; see How Google uses data when you use our partners’ sites or apps. Google says Google Analytics 4 doesn’t log or store IP addresses. In Europe, the UK and Switzerland it sets no cookies until you agree in Google’s consent message (below). To turn it off, use Google’s opt-out add-on or block its cookies.
• Ads: one page, I Know a Guy, may show ads from Google AdSense, placed by Google; no other page does. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this site or other websites. Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and other sites on the Internet. You can opt out of personalized advertising in Google’s Ads Settings, and out of other vendors’ cookies at aboutads.info. In Europe, the UK and Switzerland, Google first asks for your consent in its own message: until you agree, no advertising or analytics cookies are set and the ads aren’t personalized.
• Chat: the chat on the Contact page and beside the Bazaar’s prices goes through my server on Cloudflare to my Discord, where I read it and answer. It carries what you write, your IP address and roughly where it is (the city, region and country it points to), the pages of this site you open while the chat window is open (their address and title; nothing while it is closed) and the kind of device (phone or desktop). No name, no account, no cookie: your conversation is a random key your browser keeps, and your IP address goes only to my Discord, with your first message. My server forgets it 7 days after the last message; my copy in Discord falls under Discord’s privacy policy. Nothing is sent until you write or open a conversation.
• Fonts and badges: the fonts come from Google Fonts, and the Developer page shows live counters from shields.io, so your browser asks their servers for them, as it does on most sites.

The tools and games run in your browser: a token you decode, a password you make, a picture you mark up (a screenshot too: the browser’s own screen sharing, which you start and stop), a PDF you fill in, sign or put together, a QR code you make (a Wi-Fi password too), a barcode or a file you hash never leaves your device. Only these are sent: a match you play with a friend, What Is My IP?'s look at your address, what you look up with DNS Lookup or Whois Lookup, and the counts (all below).

• Links: some tools keep their settings in the page’s address (the Color Picker its color, the Cron Expression Explainer its expression), so a link you share carries them. Like any page address, it is counted by the analytics above. A Business Card’s link starts with card.onedeveloperway.app, an address of my company, OneDeveloperWay, Inc., that only forwards to the Business Card here and keeps nothing. The link carries the card itself after its #, a part of the address browsers never send to a server: neither address sees it, and the analytics are told the address without it. A picture on such a card that is a web address is loaded by your browser from that site. The Picture Annotator can open a picture from a link you give it (a Google Drive, Dropbox or OneDrive share link too): your browser fetches it from that site, the same as it would to show it, and nothing of it reaches this site.
• Playing with friends: a game with friends (Backgammon, Pishti, Chess, Turkish Draughts, Tic Tac Toe, Okey, Ludo, Bingo, Sea Battle, Open House, Poker, Knockout, Fun Soccer, Moving Hoop, Bullseye, Speed Trap, Food Hell) goes through a small server on Cloudflare, my host. It rolls the dice, shuffles and deals, draws the numbers, keeps the clocks or keeps both fleets, plays any seat nobody has taken, passes your moves to the others and keeps the board, the cards, the fleets and the score (each of you is sent only your own hand or fleet), and it forgets the game a day after the last move, or as soon as everyone leaves. In Knockout it only passes each side’s keys and what the fight looks like to the other, in Fun Soccer each side’s keys and what the match looks like to the other, in Moving Hoop each lane’s score and the clock, in Bullseye each archer’s arrows and the start, in Speed Trap each car’s place and the cop’s calls, and in Food Hell where each of you is, what you throw and what the junk food does, keeping none of it. It knows no names or accounts: your seat is a random key your browser keeps. Like any web request, Cloudflare sees your IP address to deliver it.
• What Is My IP?: to show your address, it asks the same server, which reads it off your visit, with what Cloudflare tells from it (your network and roughly where it is), and sends it straight back, keeping nothing. When your connection has both an IPv4 and an IPv6 address, it also asks ipify, a free public service that says it keeps no logs, for the other one. Its map comes from OpenStreetMap’s servers (your browser loads it from them, as with any map), and the link under it opens Google Maps only if you choose it.
• DNS Lookup: the name or address you type goes from your browser straight to Cloudflare’s and Google’s public DNS, whichever you ask, over HTTPS, and never through this site. Each handles it under its own policy: Cloudflare’s 1.1.1.1 and Google Public DNS.
• Whois Lookup: the domain, address or AS number you type goes to the same server on Cloudflare, which asks the registry that keeps it (the page names it with the answer) and sends the answer straight back, keeping nothing. The registry sees my server asking, never your address. To stop floods, Cloudflare counts each address’s lookups for a minute, and past 20 asks you to wait.
• Counting: each page tells my host, Cloudflare, that it was viewed and in which language (and a chat begun on it is counted there), and each game and tool also when it is opened and used (a game started, finished or left, how it was played, its level, how long it took, a copy made, whether a friend came to a game you shared), with the country and the kind of device (phone or desktop) the visit came from, so I can see which pages and which games and tools people use. Only those counts are kept, a number per day: never what you type or make, never your address, no cookie. To count how many different people came each day, your address and browser are mixed with a random value made fresh every day, and only the result is kept, for that day alone; the next day it is thrown away, so nobody can be followed from one day to the next.
• Code Practice’s question: when you open Code Practice, it asks who’s here (a developer, someone who hires, or just practicing) and, the first two, one question more. Your answers are counted the same way, once per browser and only as a number per day, and Google Analytics hears them too; what you type in the editor never leaves your browser.
• Kept in your browser: some games keep your game, or the levels you’ve finished, and some tools keep your settings and what you were working on (Text Compare keeps its two sides, the Markdown Editor the document you are writing, the Calendar the days you pick, the Code Name Generator the names you star, the PDF Toolkit your signature when you ask it to, the Regex Tester the patterns you save, Code Practice your code, what you have solved and whether you have read its intro, the Task Board your tasks and, if you ask it to, the file it keeps them in, the Focus Timer its settings and the sessions you finish, the Business Card your card, the QR Code its look but never what you put in it, the Barcode the same), in this browser’s storage on your device; each one’s page says so. None of it is sent anywhere. Clearing this site’s data in your browser erases it.
• As is: the tools and games are free and come without warranty. Check anything that matters before you rely on it: the Kitchen Converter’s grams, for one, are typical weights, and what you scoop can differ.
• Original games: the games are my own takes on genres anyone can make (falling blocks, a maze chase and more), with their own names, art and levels. They aren’t affiliated with or endorsed by any game’s publisher. Every game is played for points only: no money, nothing to win or buy.

Visual artwork, illustrations, and comic panels across this site are AI-assisted creations (occasionally referencing, adapting, or colorizing public/source motifs); all concepts, scripts, writing, captions, culinary creations, curation, and editorial direction are solely authored by me.

The paintings of favorite characters, films, singers and games, on the home page and in the Jigsaw, are fan tributes. Those characters and works belong to their owners, who don’t sponsor or endorse this site.

This site participates in affiliate and referral programs:

• Amazon Associates: As an Amazon Associate, I earn from qualifying purchases made through product recommendation links at no additional cost to you.
• Partner Referrals: Referral links to recommended tools and services provide mutual perks or credits when you choose to use them.

The nutritional supplements, gear, and wellness products mentioned on this site reflect personal reference only.

• FDA DSHEA & OTC Notice: Statements regarding dietary supplements have not been evaluated by the Food and Drug Administration and are not intended to diagnose, treat, cure, or prevent any disease. Over-the-counter medications and health products are shown for personal reference only.
• Medical Disclaimer: The content on this site is for informational purposes only and does not constitute medical or healthcare advice. Always consult a qualified physician before starting any medication or supplement regimen.

When you buy something in the Bazaar, I receive what the payment needs: your name and email from PayPal, and the TradingView username or email you write in the payment note. I use them only to deliver what you bought and to reach you about it, keep them as long as tax records require, and never sell or share them.

Some tools and games are built on open-source code and open data, each under its own license:

• three.js (MIT): the Gym’s 3D figure.
• Material Color Utilities by Google (Apache 2.0): the Color Picker’s Material 3, and the Business Card’s colors (its combinations and a logo’s colors).
• Unicode character names (the Unicode Character Database, Unicode License v3) and the HTML named character references (the WHATWG HTML Standard, CC BY 4.0): the Character Table’s names and entities, kept with the site.
• Planck.js (MIT): the physics in the games.
• PDF.js by Mozilla (Apache 2.0), with the parts it brings along (Adobe’s CMaps, BSD; the Foxit fonts, BSD, and Liberation Sans, OFL with exceptions; OpenJPEG, BSD; PDFium’s JBIG2 decoder, BSD; qcms, MIT; a CC0 color profile): the PDF Toolkit’s pages, their text and their forms, and the text of a PDF in Text Compare.
• pdf-lib and @pdf-lib/fontkit (MIT): Text Compare’s PDF download, and the PDF Toolkit’s new PDFs and the fonts written into them.
• qpdf (Apache 2.0, built to WebAssembly by @neslinesli93/qpdf-wasm, ISC; with zlib, zlib License, and libjpeg-turbo, IJG and BSD): taking the password off a PDF in the PDF Toolkit, once its password is given.
• fflate (MIT): the PDF Toolkit’s .zip files.
• sql-formatter (MIT): Text Compare’s SQL tidying, and Code Practice’s SQL Format.
• GeoNames (CC BY 4.0) and Unicode CLDR (Unicode License): the Time Zone Planner’s cities, weekends and clocks.
• OpenStreetMap (© OpenStreetMap contributors, ODbL): Precinct’s streets, buildings and places, and What Is My IP?'s map.
• WordNet 3.1 by Princeton University (the WordNet License): the Code Name Generator’s English words and what each one means.
• KeNet, the Turkish WordNet by Starlang Software and Işık University (CC BY-SA 4.0): the Code Name Generator’s Turkish words and what each one means; the trimmed lists are shared under the same license.
• Rough.js by Preet Shihn (MIT): the Picture Annotator’s hand-drawn shapes.
• .NET by the .NET Foundation and Microsoft (MIT): the Regex Tester’s .NET flavor, System.Text.RegularExpressions itself, and the runtime under Code Practice’s C#.
• Roslyn, the C# compiler, by the .NET Foundation and Microsoft (MIT): Code Practice’s C#, compiled in your browser.
• PCRE2 by Philip Hazel and the University of Cambridge (BSD): the Regex Tester’s PCRE2 flavor.
• Pyodide (MPL 2.0) and Python (Python Software Foundation License): the Regex Tester’s Python flavor, and Code Practice’s Python.
• TypeScript by Microsoft (Apache 2.0): Code Practice’s TypeScript, and its Format for JavaScript and TypeScript.
• autopep8 by Hideo Hattori, Steven Myint and Bill Wendling (MIT), with pycodestyle by Johann C. Rocholl, Florent Xicluna and Ian Lee (MIT): Code Practice’s Format for Python.
• OpenJDK’s java.util.regex (GPL 2.0 with the Classpath Exception; the source of our build is published next to it), built with TeaVM (Apache 2.0): the Regex Tester’s Java flavor.
• Go’s regexp package (BSD): the Regex Tester’s Go flavor; Go’s own compiler, linker, gofmt and standard library (BSD): Code Practice’s Go, compiled and run in your browser.
• SQLite (public domain), as @sqlite.org/sqlite-wasm (Apache 2.0): Code Practice’s SQL, run in your browser.
• Rust’s regex crate (MIT or Apache 2.0): the Regex Tester’s Rust flavor.
• markdown-it and its plugins (MIT; markdown-it-anchor: the Unlicense; markdown-it-task-lists: ISC): the Markdown Editor’s Markdown.
• CodeMirror (MIT): the Markdown Editor’s editor and its code colors, Code Practice’s editor, and Text Compare’s Edit.
• KaTeX (MIT): the Markdown Editor’s math.
• Mermaid (MIT): the Markdown Editor’s Mermaid diagrams.
• PlantUML (MIT), with Viz.js (MIT) and Graphviz (Eclipse Public License 1.0) inside it: the Markdown Editor’s PlantUML diagrams; Twemoji (CC BY 4.0) for the emoji inside them.
• Caveat, Gloria Hallelujah, Amatic SC, Comfortaa, Nunito, Noto Sans, Oxygen, Roboto Mono, Arimo, Tinos, Cousine, Carlito and Caladea (SIL Open Font License, served from this site): the fonts of the Picture Annotator and the PDF Toolkit.
• Fraunces, Instrument Sans and IBM Plex Mono (SIL Open Font License): the fonts, and the ones inside the Markdown Editor’s and Text Compare’s downloads.

If you have any questions, feel free to get in touch via the Contact page.