Privacy policy

Last updated: August 21, 2026

No legal entity registered. This application is provided by an operator who has not yet registered a company or designated a jurisdiction. No postal address, company name, or registered office exists for this service. The operator must supply an entity name, address, and jurisdiction before this policy binds anyone. Until then, this document describes data handling practices without claiming a legal entity.

What data is processed

When you enter a URL into Charsetlint, the following occurs:

The URL you provide is sent to the server (a Cloudflare Worker).
The server fetches the URL you provided and reads:
- The HTTP Content-Type response header
- The first few bytes of the response body (to detect a byte-order mark)
- The first 4096 bytes of the response body (to locate a <meta charset> tag)
A diagnostic report is generated and returned to your browser.

No part of the URL, the fetched content, or the diagnostic result is stored, logged, or retained server-side after the response is delivered. Each request is entirely stateless.

Cookies and local storage

The site does not set cookies, use tracking scripts, or read or write to localStorage or sessionStorage. No analytics, fingerprinting, or advertising scripts are loaded.

Third-party services

The site uses the following third-party services inherent to its operation:

Cloudflare — hosting and edge delivery. Cloudflare processes requests in transit (IP address, request headers, timing data) as part of its standard CDN and DDoS protection. See Cloudflare's privacy policy.
Google Fonts — fonts are loaded from Google's servers. Your browser may send a request including your IP address to Google when loading font files. See Google's privacy policy.

Data retention

No data is retained. The service has no database, no log store, and no persistence layer. Cloudflare's edge logs may retain request metadata for a period governed by their standard logging practices, but the application itself stores nothing.

Your rights

Because the service retains no personal data, there is nothing to access, correct, delete, or export. If a data subject rights request cannot be fulfilled because no data exists, the operator will confirm that fact in writing. To make a request, the operator must first be reachable — no mailbox or contact address is available until a legal entity is established.

Changes to this policy

If this policy changes, the "Last updated" date will reflect the revision. Continued use of the site after changes constitutes acceptance of the updated policy.