Last updated: June 23, 2026
Privacy policy for Bob's Multi Tool developer utilities.
Bob's Multi Tool is designed around local browser utilities. Inputs used for formatting, encoding, decoding, generation, and conversion are processed in your browser where practical and are not stored by this site.
HTTP status and DNS tools require a small server route because browsers cannot perform those checks directly. Do not submit private internal hostnames or confidential data.
The site may use privacy-conscious analytics and third-party services to understand usage patterns and support the free utility experience. These services may use cookies or similar technologies according to their own policies.
Browser-local tools are intended for temporary transformation and review. Inputs for JSON formatting, Base64 conversion, JWT inspection, hashing, password generation, color conversion, text cleanup, and similar utilities should be reviewed before pasting, and sensitive production values should be redacted or replaced with safe samples.
DNS lookup and HTTP status checks are designed for public hostnames and public URLs. The server route rejects private, reserved, localhost, and unsafe targets, but users should still avoid submitting internal names, secret query parameters, private headers, or URLs that should not be requested by a public service.
Generated or transformed output is shown so you can inspect, copy, and use it in your own workflow. The site does not guarantee that output is appropriate for every runtime, scheduler, parser, browser, deployment provider, or security policy, so review warnings and examples before using the result.
Favorite tools, recent tools, and optional tool-session restore behavior are kept in local browser storage so repeat visitors can continue work without creating an account. You can clear local history from the interface or through your browser storage controls.
Do not paste passwords you actively use, private keys, unredacted access tokens, confidential customer records, private network addresses, account recovery data, or regulated personal information. Use representative test data when a tool result needs to be shared with another person.
Use the tools with examples that are safe to inspect in a browser. Formatting, encoding, decoding, token inspection, text cleanup, color checks, and generator workflows are meant for temporary review, not long-term storage or account-based editing.
Network tools should receive only public domains or public URLs. Do not include secret query strings, private headers, internal hostnames, customer records, or links that should not be requested by a public diagnostic service.
The site may use Google advertising services and other third-party services to keep the utilities available for free. These services may use cookies, device identifiers, or similar technologies to serve ads, measure performance, prevent abuse, and comply with their policies.
Formatting, decoding, and generation run in the browser whenever practical. Input state is saved only in this browser so you can restore the last workspace without an account.
Format, minify, validate, inspect, and copy a safe API response report for JSON payloads without sending them to a server.
Test JavaScript regular expressions, inspect matches, and keep common patterns close by.
Decode JWT header and payload segments locally, compare expected claims, and copy an auth handoff report.
Encode, decode, inspect, and copy a safe payload report for Base64, Base64URL, image data URLs, JSON payloads, and JWT segments locally in the browser.
Build, explain, preview, and copy a safe schedule report for five-field cron expressions.
Generate UUID v4 values in bulk for fixtures, traces, and test data.
Generate MD5, SHA-1, SHA-256, SHA-512, HMAC signatures, and a safe signature report locally.
Generate strong random passwords or memorable passphrases with a safe handoff report.
Generate downloadable QR codes with URL, Wi-Fi, email, and vCard payload builders plus scan diagnostics and a safe scan report.
Convert HEX, RGB, and HSL colors and inspect WCAG AA/AAA contrast diagnostics.
Format SQL queries for readable reviews and debugging.
Format CSS rules and inspect selectors, at-rules, custom properties, color tokens, and minified size.
Format JavaScript snippets and inspect functions, imports, exports, async usage, browser APIs, and copy risks.
Look up public DNS records, inspect A/AAAA, CNAME, MX, TXT, SPF, DMARC, and NS signals, and copy a deployment report.
Check HTTP status, request-profile reachability, redirect diagnostics, final URL, response headers, pasted header blocks, CSP drafts, and a copyable public URL report.
Questions about this policy can be sent to bobob935@gmail.com.