Privacy policy

Last updated 20 August 2026

1. Who runs this site

Delimit is operated by Mbule.Tech ("we", "us"). This policy covers the website at delimit.mbule.online and every tool hosted on it.

If you are in the United Kingdom or the European Economic Area, we are the data controller for the limited personal data described in sections 4 to 6. You can reach us using the details in section 12.

2. The text you paste

This is the part most people care about, so it comes first.

Every tool on this site runs as JavaScript inside your browser. When you paste a list, drop in a file, or type into a box, that content is held in your device's memory, converted on your device, and shown back to you on your device. It is never transmitted to us or to anyone else. There is no server-side processing to send it to — the site is a set of static files.

Consequences worth spelling out:

• We cannot see what you paste, so we cannot hand it to anyone else, lose it in a breach, or recover it for you.
• Closing or refreshing the tab discards whatever is in the main paste box. It is not saved anywhere unless you use the Save button, which writes a file to your own device.
• One exception, and it is worth knowing about. The small option fields — before each, after each, find and replace with — are remembered between visits along with the rest of your settings, so your setup survives a refresh. That means anything you type into them stays in this browser until you change it. If you put something sensitive into find on a shared computer, clear the field or use Erase saved settings in the footer.
• Share setup links carry your chosen options only — separator, quotes, case, sort order and so on. Nothing you typed goes into a share link: not the paste box, and not the find, replace, before-each or after-each fields. A URL travels through browser history, referrer headers and server logs, so it is the wrong place for any of it.

3. What is stored in your browser

We use your browser's localStorage to remember your preferences between visits. This data stays on your device and is not readable by us.

None of these contain the contents of the main paste box — that is never written to storage. As noted in section 2, the four small option fields are, because remembering your setup is the point of them. You can erase everything above at any time with the Erase saved settings button in the footer of every page, or by clearing site data in your browser settings. The tools work perfectly well with storage blocked.

4. What our host records

The site is hosted on Cloudflare Pages. Like every web host, Cloudflare's servers record standard request information when a page or file is served:

• Your IP address
• The date and time of the request, and the full URL requested — including any query string, such as the ?c= parameter on a shared-setup link
• Your browser's user-agent string and referring page, if any

These logs are generated and held by Cloudflare for network operation, abuse prevention and security — for example, blocking denial-of-service traffic. We do not build profiles from them, do not sell them, and do not combine them with anything else. Cloudflare processes this data as our hosting provider under its own terms and sub-processor commitments; see Cloudflare's privacy policy.

How long they are kept. We do not operate the log store and cannot set its retention ourselves; the period is determined by Cloudflare as our hosting provider, and for its edge request logs is measured in days rather than months. We do not export, copy or retain these logs separately, so we hold no independent record of your visit at all.

Because Cloudflare operates a global network, requests are served from, and logged in, whichever data centre is nearest you. Where that involves transferring personal data outside the UK or EEA, Cloudflare relies on Standard Contractual Clauses.

5. Webfonts and third-party requests

There are none. The two typefaces this site uses, Archivo and JetBrains Mono, are served from delimit.mbule.online itself, not from Google Fonts or any other font service. No request your browser makes while using this site goes to a third-party domain.

This is deliberate. Loading fonts from a third party would hand that company your IP address and browser details on every page view, for no benefit to you. We used to do it, and stopped.

You do not have to take our word for any of this. Open your browser's developer tools, switch to the Network tab and reload the page: every request is to this domain. The site's Content-Security-Policy header also forbids the browser from loading scripts, styles, fonts or images from anywhere else, so even a mistake on our side cannot quietly add one.

6. Analytics

We use Cloudflare Web Analytics to count page views. It is cookieless and privacy-preserving by design: it does not set a cookie, does not use localStorage, does not fingerprint your device and does not track you between websites.

It records the page URL, the referring page, and coarse information such as browser family, operating system family and country, all in aggregate. It does not collect anything that identifies you personally, and it never sees the text you paste into a tool.

We use it for one reason: to know which tools people actually use, so we build the next one for a real need rather than a guess.

7. Cookies

We do not set cookies. There is no advertising cookie, no analytics cookie and no session cookie, because there are no accounts and no server-side sessions. That is why you are not being asked to dismiss a consent banner: there is nothing to consent to.

The localStorage entries in section 3 are not cookies. They are never sent to a server with your requests, they exist purely to remember settings you chose yourself, and they can be erased from the footer of any page.

Cloudflare may set a cookie of its own if its security systems need to challenge suspicious traffic. That is a security function of the host, not something we configure or read.

8. Advertising

There is currently no advertising on this site and no advertising network is loaded. If we ever introduce advertising, we will update this policy before it goes live, name the network, and describe what it collects. We will not retro-fit ad tracking silently.

9. Legal basis and your rights

Where UK GDPR or EU GDPR applies, our legal basis for processing the limited data in sections 4 to 6 is legitimate interests — specifically, keeping the site available, secure and working, and understanding in aggregate whether anyone is using it. We consider this proportionate because the data is minimal, is not used to identify you personally, and is not shared for marketing.

You have the right to ask for access to your personal data, correction, erasure, restriction, portability, and to object to processing. In practice we hold almost nothing that can identify you: we have no account for you and cannot connect an IP address in a host's log to a person. If you contact us we will explain honestly what we do and do not hold rather than pretend to a process we do not have.

If you are unhappy with how we have handled your data, you can complain to your national data protection authority. In the UK that is the Information Commissioner's Office.

10. Children

This is a general-purpose text utility, not a service aimed at children, and we do not knowingly collect personal data from anyone under 13. There is nothing to sign up for and no profile to create.

11. Changes to this policy

If we change what the site collects, we will change this page and update the date at the top. Material changes — a new third-party script, or advertising — will be described here before they take effect, not afterwards.

12. Contact

Questions about this policy, or about privacy generally, can go to our contact page.