Private, In-Browser Tools: Which Never Upload Your Data, and Which Do (2026)

Many free online tools send whatever you paste to a server, where it can be logged and kept. Your API responses, your passwords, your draft emails: for anything sensitive that is a bad trade.

Another approach is a tool that does the work in your browser: the page’s own code processes your input, so it is not sent to the tool’s server. Not every tool in this list works that way, so each section below says where your input goes. We checked this in each tool’s code on 7 November 2026. You can try all 14 without creating an account; what is free and what needs a paid plan is listed with each tool.

Disclosure: all 14 tools in this list are made by BestPaid, our sister site, so this is a guide to our own products rather than an independent review.

In short: JSONForge, RegexBuilder, PasswordForge, ColorWell, CronExplain, TimeForge, VaultMind and Mythforge process your input in your browser. MetaForge, EmailPolish, ReplyForge, AdCopyForge, SloganCraft and BlogOutliner send it to our server.

Developer utilities that run in your browser

In these six tools the parsing, generating and converting happen in your browser; what you paste or type is not sent to our server.

• JSONForge — format, diff and validate JSON and generate a JSON Schema from a sample, in the browser. Handy for inspecting API payloads you would not want to paste into a random web box. The free plan processes up to 50 KB per document; a paid plan removes the limit and adds batch (multi-document) mode and downloads of the result, including the generated schema.
• RegexBuilder — build and test regular expressions with live match highlighting and an explainer that describes each part of the pattern in plain English. A paid plan saves named patterns in your browser, runs a multi-string test suite and exports the pattern as code (JavaScript, TypeScript, Python, Go, PHP or Java).
• PasswordForge — generate random passwords, memorable passwords, word passphrases and PINs with the browser’s built-in cryptographic random generator, with the strength shown in bits. Each password is created on your device and is not sent to our server. A paid plan adds bulk generation (up to 1,000 at a time) with CSV export.
• ColorWell — build color palettes from a base color and check WCAG contrast. Copying a palette as CSS variables, a Tailwind config, JSON or Figma tokens is free; a paid plan adds file downloads (CSS and JSON) and a PNG swatch sheet.
• CronExplain — turn a cron expression into plain English and see its next 10 runs. A paid plan shows the next 25 runs in a time zone you choose and explains many lines at once, with CSV or JSON export.
• TimeForge — find the working hours that overlap across time zones when you schedule a meeting. A paid plan saves rosters in your browser and downloads the best slot as an .ics calendar file.

Private AI that runs on your device

These two download an AI model into your browser the first time you use them. After that, your text is processed on your device and is not sent to our server. They need a browser with WebGPU support, and the first download is large, so use Wi-Fi.

• VaultMind (PrivateScribe, an earlier tool in this list, now redirects to it) — summarize notes and documents, pull out key points and action items, find connections between notes and spot what is missing from them, with on-device AI. The free plan uses a smaller model; a paid plan uses a larger one on desktop computers and removes ads.
• Mythforge (Grimhollow, an earlier game in this list, now redirects to it) — a high-fantasy text adventure in which an on-device AI acts as the game master and reacts to every choice. The free plan allows 20 turns per run with a smaller model; a paid plan removes the turn limit and uses a larger model on desktop computers.

Tools that send your input to our server

These are not in-browser tools: what you enter is sent to our server, which does the work and sends back the result.

• MetaForge — audit a page’s meta tags and preview how it may look in Google results and social cards. The address you enter is sent to our server, which downloads that page and reads its tags. A paid plan audits up to 25 URLs at a time and exports a CSV report.
• EmailPolish and ReplyForge for polishing email drafts and drafting replies to customer messages.
• AdCopyForge, SloganCraft and BlogOutliner for ad copy, taglines and article outlines.

These five AI writing assistants send the text you type to our server, where an AI model writes the result. Each one gives 3 free runs; after that a paid plan is needed.

Why in-browser tools are worth preferring

Three reasons keep coming up:

1. Privacy by architecture. If your input never leaves the page, there is no copy of it on the tool’s server to leak and none to end up in a training set. That is easier to rely on than a privacy policy promise.
2. No friction. No signup wall before you can try the thing. You paste, you get the answer.
3. No waiting on a server. Once the page has loaded, an in-browser tool does not need our server to process your input, so a busy server or a spent API quota does not slow it down.

The trade-off: what is free differs from tool to tool, as listed above, and paid plans add bulk work, file downloads, saved patterns and rosters, larger AI models and no ads. The free plans show a banner ad, which loads a script from an outside ad network. If you handle anything sensitive — credentials, customer data, unreleased copy — use the tools that process it in your browser, and do not paste it into tools that send it to a server.