Privacy Policy

What we don't collect

• Your text: The text you paste, type, or upload via file is processed entirely client-side. It is never sent to any server.
• Uploaded files: Files you drop or upload (.txt, .md) are read directly in your browser using the FileReader API. No file data is ever transmitted.
• Cookies: We use no cookies of any kind — no session cookies, no tracking cookies, nothing.
• Analytics: We don't use Google Analytics, Mixpanel, Hotjar, or any analytics platform that tracks user behavior.
• Personal data: We don't collect names, emails, IP addresses, or any personally identifiable information.

How it works technically

countTokens is a static website — it consists only of HTML, CSS, and JavaScript files served from a CDN. There is no backend server, no database, no API that processes your text.

The tokenization libraries (which convert text to tokens) are bundled directly into the JavaScript that runs in your browser. When you type text, the counting happens in real-time on your device using these bundled libraries.

We use a strict Content Security Policy that restricts outbound network requests, providing an additional architectural guarantee that your text cannot be transmitted.

How to verify

Don't trust us — verify for yourself:

1. Open your browser's Developer Tools (press F12 or Cmd+Opt+I)
2. Go to the Network tab
3. Clear the existing requests
4. Type or paste text into the calculator
5. Observe that zero network requests are made

Local storage

countTokens does not use localStorage or any local storage mechanism. No data persists between sessions.

Hosting provider

This site is hosted on Cloudflare Pages. Like all web servers, Cloudflare may log standard access information (IP address, timestamp, page requested) as part of their infrastructure. We do not access, use, or control these logs. See Cloudflare's Privacy Policy for details.

Open source

This website is open source. You can review the complete source code to verify all claims made in this privacy policy.