DiffToken

Privacy Policy

Last updated: July 18, 2026

This policy explains how DiffToken processes information when you use the website and its text comparison service. For privacy questions or requests, contact [email protected].

Text submitted for comparison

When you submit two texts, your browser sends them to the DiffToken frontend and comparison backend so that the requested difference can be calculated and returned.

  • Purpose: provide the comparison you requested.
  • Legal basis: performance of the service requested under the Terms of Service.
  • Retention by the application: the submitted texts and generated comparison are processed for the request and are not written to the application database.
  • Required or optional: providing both texts is optional, but the comparison cannot be produced without them.

Do not submit information that you are not authorised to process. Avoid submitting highly sensitive or confidential information when an offline comparison tool would be more appropriate.

The Share action creates a URL containing both texts, the selected options and the active view in a base64-encoded share parameter. Base64 is an encoding, not encryption.

Anyone who receives the URL can decode and read its contents. The complete URL may also be retained in browser history, bookmarks, clipboard history, messaging systems, link-preview services and technical request logs when the link is opened. Do not use Share for confidential or personal data. You control whether this URL is created and to whom it is sent.

Information stored in your browser

DiffToken uses localStorage on your device for interface preferences such as the selected theme, active comparison view, collapsed controls and the “hide unchanged” setting. The current Astro frontend does not store the submitted comparison texts in localStorage.

The current workspace—texts and comparison settings—is kept temporarily in sessionStorage so it survives a reload in the same tab. It is removed when you clear the comparison or close that tab. The rendered result itself is recalculated and is not cached in browser storage.

These preferences remain on your device until you clear the site’s browser storage. They are not analytics identifiers and are not used to follow you across websites.

Cookies and analytics

The current Astro frontend does not load Google Analytics, Google Tag Manager, advertising trackers or third-party audience-measurement scripts. It does not set analytics or advertising cookies.

Infrastructure and security providers may use strictly necessary mechanisms to deliver and protect the service. Their technical processing is separate from advertising or cross-site tracking.

Technical request metadata

Hosting, network-security and backend infrastructure necessarily process technical metadata such as IP address, date and time, requested URL, response status, user agent and referring page. This is used to deliver requests, maintain reliability, rate-limit abuse, investigate errors and protect the service. The legal basis is the legitimate interest in operating and securing DiffToken.

The application does not intentionally add comparison texts to its logs. Error logs may record a technical stack trace, but the comparison API does not include the submitted texts in its error-log message. Infrastructure-level retention is governed by the active hosting and security configuration and may vary; DiffToken does not claim a fixed 30-day period without a verified production setting.

Recipients and service providers

Data is processed only by DiffToken and the infrastructure providers needed to host, deliver and secure the frontend and comparison backend. DiffToken does not sell or rent submitted text or use it for advertising.

Information may also be disclosed when required by law or when necessary to establish, exercise or defend legal rights.

Security and international processing

DiffToken uses HTTPS in transit and limits the comparison workflow to the systems needed to return a result. No Internet service can guarantee absolute security. Infrastructure providers may process technical metadata from locations permitted by their contractual and legal safeguards.

Your rights

Depending on the processing and applicable law, you may request access, rectification, erasure, restriction or portability of personal data, and may object to processing based on legitimate interests. Because comparison texts are not retained in the application database, DiffToken may no longer hold them by the time a request is received.

Send requests to [email protected]. You may also lodge a complaint with the French data-protection authority, the CNIL.

Children

The service is not directed to children under 16. If you believe a child has provided personal data through the service, contact us at the address above.

Changes to this policy

This policy may be updated when the service or its infrastructure changes. The date at the top of the page identifies the current version.