Last updated: March 2026
Payload Playground is a free, client-side security testing toolkit. We are committed to protecting your privacy. This policy explains what data we collect, what we do not collect, and how your information is handled when you use our website at payloadplayground.com and the payload-playground CLI package on npm.
We collect minimal, anonymized usage data through third-party analytics services:
We do not collect, store, or transmit any of the following:
All tools, generators, and the encoding pipeline run entirely in your browser using client-side JavaScript. No input data is ever sent to our servers or any third party. Your payloads, tokens, hashes, encoded data, and all other tool input and output remain exclusively on your device.
We use your browser's local storage for two purposes only:
This data is stored locally on your device and is never transmitted to any server. You can clear it at any time through your browser settings.
The following cookies may be set when you visit Payload Playground:
| Cookie | Purpose | Duration |
|---|---|---|
| _ga | Google Analytics — distinguishes unique visitors | 2 years |
| _gid | Google Analytics — distinguishes unique visitors | 24 hours |
| theme | Stores your dark/light mode preference | 1 year |
No advertising, marketing, or tracking cookies are used. You can block or delete these cookies through your browser settings without affecting core functionality.
Payload Playground does not offer user accounts, registration, or login functionality. There is no sign-up process, no email collection, and no newsletter. All features are available immediately without any form of authentication.
The payload-playground CLI package (available on npm) runs entirely on your local machine. It does not collect any data, send analytics, or make network requests. All payload generation and utility functions execute locally.
We use the following third-party services:
Payload Playground is not directed at children under the age of 13. We do not knowingly collect any information from children. The tools are intended for security professionals, researchers, and students engaged in authorized security testing and education.
We may update this privacy policy from time to time. Changes will be reflected on this page with an updated "Last updated" date. We encourage you to review this page periodically.
If you have any questions about this privacy policy, please contact us at [email protected].