Privacy Policy

Last updated: October 3, 2026

totallynotavirushehe.fun is affiliated with SantosMods.dev. For privacy questions, contact [email protected].

We do not sell data

We do not sell personal data, tool inputs, files, or generated results. There are no advertising or analytics scripts in this application.

Tool inputs and files

Text, passwords, hashes, QR codes, and images are processed in your browser. This application has no upload endpoint and does not send these inputs or results to our server. We do not keep a log of your tool inputs or save a history of your work.

Files are read into browser memory. Downloads are saved to your device when you choose to download them. Close the tab to release the application's in-memory work. Your browser or device may retain downloads, clipboard contents, or browser session data under its own settings.

Hosting and infrastructure

Our production infrastructure uses OVHcloud for hosting, Cloudflare for network delivery and protection, and NGINX as web server software. These services handle requests needed to deliver the website. Network requests can expose information such as your IP address, requested URL, request time, and browser headers to the infrastructure handling them.

The application does not log tool contents. Infrastructure request logs are separate from tool processing. Their availability and retention depend on server settings and provider policies.

HTTP header viewer

If you choose URL mode, your browser sends a request directly to the website you enter. That website receives your IP address and request headers. We do not proxy or save the response. Its CORS policy controls which headers your browser can read. Pasted-header mode works locally.

Local preferences and cookies

The application stores only your light or dark theme preference in localStorage on your device. It does not set application cookies or store tool inputs in localStorage. Hosting and network providers may use their own cookies or request processing; those are separate from the tool application.

Email contact

If you email us, we receive your email address and whatever you include in your message through Gmail. Avoid sending passwords, private tokens, or sensitive files. We do not sell correspondence. No email retention period is specified here.

File retention and limits

We do not store uploaded or generated files on our server: this version processes files locally. There are no server files awaiting deletion, and no four-hour deletion queue is used.

Text is limited to 1 MB per field; text diff to 100 KB per field. Files are limited to 20 MB each. Images may contain up to 40 million input pixels; output is limited to 16 million pixels and 8,192 pixels per side. Image format support depends on your browser. Animated images export as one frame.

Practical security notes

Markdown is sanitized and embedded media is removed. JWT decoding does not verify signatures. Image metadata may contain location details. Image exports omit original EXIF metadata.