ToolKitLast updated: 2026-10-01
This Privacy Policy explains how Explorme (https://explorme.com) collects, uses, and shares information when you use our website and services. Explorme is committed to protecting your privacy. Where possible, our tools perform processing locally in your browser so data does not leave your device.
Client-side Processing & Local Data
Many Explorme tools process files entirely in the browser (using WebAssembly, File APIs, Web Workers and IndexedDB). Files you open or drop into the tools are processed locally and are not uploaded to our servers unless explicitly stated. LocalStorage and IndexedDB may be used to cache user preferences, recent tasks, or state to improve UX. API drafts and invoice details may be sensitive; do not treat local storage as encrypted secret storage.
Accounts and Saved Collections
Sign-in is optional for ordinary tool use. Google and GitHub OAuth provide identity information for a session. Email/password registration stores an email address, optional name and a bcrypt password hash in MongoDB. Authentication uses session cookies. Saved API collections are stored in MongoDB and scoped to the signed-in user; they can include request URLs, headers, bodies, collection variables and optional response examples. You can delete saved collections in the API Tester. Contact us for account access or deletion requests.
API Requests and Public Sharing
API Tester requests pass through our server-side proxy to the target API, including configured authentication, headers, bodies and uploaded request files. Application proxy logs contain diagnostic metadata such as method, hostname, status and duration; they exclude full target URLs, query strings, request bodies and upstream error text. Hosting infrastructure may maintain separate access logs. Public Share saves the request in MongoDB and makes it retrievable by anyone holding the link, without signing in. Shared requests may contain headers, body and auth values: remove credentials and confidential data before sharing. Links expire seven days after creation; retrieval rejects expired records even before database cleanup removes them. QR share links embed the QR payload in the URL, making it visible to recipients, browser history and potentially server access logs.
Local Storage and External Services
Browser localStorage holds favorites, recent tools, API request history, environments, request drafts, layout preferences and invoice drafts. These may contain sensitive values and remain on that browser until cleared or removed. DNS lookups send the queried domain through our server to Cloudflare DNS. IP lookups send the queried IP to ipwho.is, with ipapi.co and ipinfo.io as fallbacks. My IP may use the address forwarded by the hosting proxy. Currency conversion fetches rate tables from ExchangeRate-API; entered amounts are calculated locally. OCR processes images locally but downloads Tesseract worker, WebAssembly and English language assets from jsDelivr. Markdown previews may load images from external URLs included in the input.
Analytics
The site integrates Vercel Web Analytics for aggregate page usage when supported by the deployment. Its standard collection does not use analytics cookies. Our beforeSend filter allows only known public page paths and removes query strings, fragments and URL credentials; unknown paths are dropped. Custom events are limited to affiliate impressions and deliberate clicks when the affiliate system and an approved, mapped offer are enabled. Those events contain only static partner, offer, placement and page identifiers. Affiliate previews send no affiliate events, and affiliate tracking is disabled by default. We do not send tool inputs, outputs, QR payloads or share identifiers as analytics events. The service also processes technical usage information such as browser, device and approximate region. See Vercel's analytics privacy documentation.
Advertising
Google AdSense is not approved and advertising is disabled. While disabled, the site does not load the AdSense script or initialize Google ad units. Any future launch will require updated disclosures and applicable consent controls. No advertising consent platform is currently installed. Browser cookie settings do not replace those future consent requirements.
Contact Messages
The contact form opens your email application with a prepared message; it does not send a message through our server. If you send that email, we receive the information you include through our email provider.
Your Rights (GDPR & CCPA/CPRA)
If you are in the EU/EEA (GDPR) or California (CCPA/CPRA), you have rights regarding your personal information including access, correction, deletion, restriction of processing, and data portability where applicable. To exercise these rights, contact us at kr.aditya2602@gmail.com. We'll respond within applicable legal timeframes and provide information on verification and any applicable exceptions.
How to Opt-Out / Manage Cookies
You can manage cookies and clear this site's local browser storage through browser settings. Clearing storage removes local drafts and preferences; it does not delete cloud collections or your account. Sign out to end the current authenticated session and contact us for server-side data requests.
Third-Party Links
Our site may contain links to third-party sites. We are not responsible for their privacy practices. Review their privacy policies before sharing personal information.
Contact
For privacy requests or questions, email kr.aditya2602@gmail.com.