Payload and website data boundaries
A2UI Validator Privacy Notice
Raw A2UI payload processing is local. Website delivery, contact messages, and any future advertising have separate data boundaries explained below.
Effective July 17, 2026 · Google AdSense is not active
Privacy at a glance
Current application facts
A2UI payloads
The validator does not upload raw input
Input remains in the current page state and is sent to a same-origin Web Worker for parsing, schema checks, and semantic checks. The validator does not send the payload to a site API or put it in a URL, cookie, localStorage, IndexedDB, or application database. Refreshing or closing the page, or terminating the Worker, leaves no application-managed payload copy behind.
When you choose Copy result, the clipboard receives a safe diagnostic summary—not the original payload.
Email is a different path
Only share a sanitized reproduction
If you voluntarily include a payload in an email, it leaves the local validation path and is handled as part of that message. Do not email secrets, credentials, tokens, or a complete private payload. Reduce a correctness report to the minimum sanitized input needed to reproduce the issue.
Product analytics
Google Analytics measures website use
If you select Allow analytics, the site loads Google Analytics measurement ID G-TV53PJGR16for aggregate page, session, browser or device, approximate-region, and engagement measurement. The tag limits the configured page location to the origin and pathname, excluding query parameters and fragments. The nine product-funnel events remain only in the current page's in-memory window.__A2UI_EVENTS__ buffer for verification and are not forwarded to Google Analytics in this release. The application does not send the payload, full result, JSON Pointer, surface or component IDs, content hashes, clipboard contents, or email address to Analytics.
Website delivery
Infrastructure may process standard request data
Vercel hosts the application and may process standard request information—such as IP address, user agent, requested path, and timestamp—for delivery, security, and fault diagnosis. Cloudflare currently provides domain and DNS services; this notice does not assume that Cloudflare proxies every HTTP request. Infrastructure data, when generated, follows the applicable provider configuration and retention settings.
Retention and security
Local payload handling is a scoped promise
The application does not persist validation payloads. That statement is narrower than claiming that a public website produces no network metadata or can guarantee absolute security. External providers and linked sites operate under their own terms and privacy notices.
Cookies and advertising
Analytics is consent-based; advertising is not
Before a choice, the Google tag is not loaded. The choice itself is stored locally under a2ui_analytics_consent. If you allow analytics, Google Analytics may set first-party cookies such as _ga and an installation-specific _ga_*cookie, and may process the configured page path, referrer, browser or device information, approximate location derived from network data, and engagement measurements under Google's configuration and policies. The site does not currently serve third-party advertising. There is no Google AdSense script, publisher ID, or ads.txt record in this release.
Analytics choices and future advertising
You can decline in the on-site prompt, clear site data to make a new choice, use browser controls, or install Google's Analytics opt-out add-on to limit Analytics. Before advertising is activated, this notice and the site's consent controls will be reviewed for the applicable regions. A real AdSense publisher ID will be used only after it is issued; no placeholder is published.
External links
Other sites have their own practices
Links to A2UI documentation, GitHub, Google, Vercel, or other sites are provided as references. Visiting them is governed by their own privacy notices and data practices.
Changes to this notice
Data-flow changes require a notice update
The effective and last-updated date is July 17, 2026. This notice now reflects Google Analytics and must be reviewed again before advertising, accounts, persistence, or another material data flow is enabled.
Your choices and contact
Ask a privacy or correction question
You may avoid entering a payload, clear the page by refreshing or closing it, and use the contact address for a privacy or accuracy question without including private input. See About and contact guidance for a useful report format.
Production contact addresssupport@a2ui-validator.com