Privacy

What you paste stays in your browser. Every tool on this site runs as JavaScript on your own device. Cron lines, regular expressions, test text, IP addresses and timestamps are never sent to the server or anywhere else. The site's Content Security Policy enforces this: it sets connect-src 'self' and default-src 'self', so the browser itself refuses to send data to any other host, and the pages make no requests carrying what you type. (The address bar does carry the main input, such as /cron/?q=…, so that a breakdown can be bookmarked or shared. That address reaches the server only when a page is loaded with it: when you share it, reload, or submit the form with JavaScript turned off. Regex test text is never put in the address.)

breakitdown sets no cookies and loads no third-party scripts, fonts, images or trackers. Your browser may store one preference on your own device, the light or dark theme you picked; it never leaves your device.

If this ever changes, for example if advertising is added, this page will say so before it happens.

Server logs

Like almost every website, the server keeps a log of requests: the time, the page requested, the referring page, the browser's user-agent string, and a shortened network address (the last part of the IP address is removed before anything is written, so the log cannot point to one connection). The log is used only to count visits and to stop abuse, is never shared or sold, and is deleted after 30 days. The legal basis under the GDPR is legitimate interest in running and securing the site.

The hosting proxy in front of this site (measured 2026-10-26): successful requests are not logged there. Requests that fail at the proxy are recorded with the visitor's IP address and browser user-agent, with cookies and authorization headers redacted, and are currently kept until the proxy is restarted. A retention limit for those records is under review.