1. Introduction
FlyingFish Space ("we", "our", or "this website") provides free online utility tools designed to work directly in your browser. We value transparency and are committed to protecting user privacy while complying with applicable data protection regulations.
2. Information We Do Not Collect
FlyingFish Space does not require user registration and does not intentionally collect personally identifiable information such as names, email addresses, phone numbers, or account credentials.
The tools provided on this website operate locally in your browser whenever possible and do not transmit user-generated content to our servers unless explicitly stated.
3. JSON Pipeline Data Processing
JSON Pipeline (json.flyingfishspace.com) is our data-processing toolset for repairing, validating, and transforming JSON. How your submitted data is handled depends on which tool you use:
- Clean, Schema Validation, and Transform run entirely in your browser. The JSON you submit to these tools is processed locally on your device and is never transmitted to our servers.
- AI-Assisted Repair (ai-clean) is different: this tool sends your submitted content to a third-party AI model, hosted via Cloudflare Workers AI, in order to perform the repair. This is disclosed at the point of use. We do not intentionally store or log the content of your submission once processing completes.
Some tools in this cluster run internal data-quality checks (for example, flagging numeric values that could lose precision during processing). When such a check is triggered, we may log that the event occurred — but never the submitted value itself. This is used solely to help us calibrate these safeguards over time.
We also retain non-content technical metadata related to API usage — such as token counts and processing duration associated with AI-assisted repair calls — for internal cost analysis and billing accuracy. This metadata does not include the content of your submission.
4. Automatically Collected Information
Like most websites, basic technical information may be collected automatically for security, performance, and analytics purposes. This may include:
- IP address (often anonymized or truncated)
- Browser type and version
- Device type and operating system
- Referring pages and timestamps
5. Cookies and Similar Technologies
Cookies or similar technologies may be used by third-party services integrated into this website, particularly for security and analytics. FlyingFish Space itself does not use cookies to track individual users across websites.
This website may set a session cookie (__session_id) to maintain basic
session continuity during your visit. This cookie does not contain personally identifiable
information and expires after 30 days of inactivity.
6. Third-Party Services and Integrations
6.1 Website Security: Cloudflare Turnstile
To protect our web properties against malicious automated traffic, brute-force requests, and bot abuse, this website integrates Cloudflare Turnstile, a privacy-first security tool provided by Cloudflare, Inc.
Turnstile operates in an Invisible Mode, meaning it evaluates browser telemetry silently in the background without displaying interactive security puzzles or checkboxes. To evaluate whether a visitor is a human or an automated bot, Turnstile processes essential non-identifiable client-side signals, including:
- Client IP address
- TLS Fingerprint and network environment context
- User-Agent HTTP Headers
- Sitekey and association origin data
The collection of these signals is strictly necessary to maintain the fundamental security and availability of our services. Cloudflare does not have the ability to directly identify any individual from the signals collected. For detailed information on how this data is managed, please refer to the official Cloudflare Turnstile Privacy Addendum .
6.2 Analytics: Google Analytics 4 (GA4)
This website uses Google Analytics 4 (GA4), a web analytics service provided by Google LLC. GA4 helps us understand how visitors interact with the website, including page views, navigation patterns, and session duration.
Data collected by GA4 may include:
- Anonymized IP address
- Browser and device information
- Pages visited and time spent on each page
- Referring websites
GA4 is configured on this website with IP anonymization enabled. We do not use GA4 for remarketing or cross-site tracking. Data is processed by Google and may be transferred to and stored on servers in the United States.
For more information, see the Google Privacy Policy . You may opt out of GA4 tracking by installing the Google Analytics Opt-out Browser Add-on .
6.3 Behavioral Analytics: Microsoft Clarity
We partner with Microsoft Clarity to capture how you use and interact with this website through behavioral metrics, heatmaps, and session replay, in order to improve website usability and user experience. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of content and online activity. Additionally, this information is used for site optimization and fraud/security purposes.
Data collected by Microsoft Clarity may include:
- Mouse movements, clicks, and scrolling behavior
- Session recordings (with sensitive form fields masked by default)
- Heatmap data based on aggregated user interactions
- Device type, screen resolution, and browser information
- IP address and approximate geographic location
This data is transmitted to Microsoft Ireland Operations Limited, which acts as an independent data controller for users in the EEA, UK, and Switzerland. Data may be stored on Microsoft Azure servers, including in the United States.
For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement .
You may opt out of Microsoft Clarity data collection by visiting Microsoft Clarity Privacy Settings .
6.4 Live Chat Support: Tawk.to
Our Contact Support page offers an optional live chat feature powered by Tawk.to, a third-party live chat provider. This widget is not loaded when you simply visit the Contact page — it is only loaded after you complete a Cloudflare Turnstile verification step and choose to open the chat. If you do not initiate a chat, no Tawk.to data collection occurs on that page.
If you do open the chat, Tawk.to may collect:
- Your IP address, browser type, and device information
- The content of your chat messages
- Any contact details you choose to provide during the conversation (e.g., name, email address, order ID)
- Cookies and local storage used to maintain your chat session
This data is processed by tawk.to inc., which is based in the United States, meaning your chat data may be transferred to and stored on servers outside your home jurisdiction. Tawk.to acts as a data processor on our behalf for the purpose of providing customer support. For full details on how Tawk.to collects and handles data, see the Tawk.to Privacy Policy .
If you prefer not to use live chat, you may instead reach us by email at support@flyingfishspace.com, which does not involve Tawk.to.
6.5 Payment Processing: Stripe, PayPal, and Paddle
When you purchase API credits or perform account top-ups, transaction processing is handled by third-party payment service providers and Merchants of Record, including Stripe, PayPal, and Paddle.
FlyingFish Space does not directly collect, handle, or store sensitive financial card details (such as full credit card numbers, CVV codes, or bank account credentials) on our servers. All payment details are transmitted directly to these authorized processors via secure, encrypted channels.
Service Roles and Data Handling:
- Stripe & PayPal: Operate as third-party payment gateways. Your billing details are provided directly to them to authorize and complete payments.
- Paddle: Serves as our Merchant of Record (MoR) for designated checkout flows. Paddle manages transaction processing, invoicing, sales tax/VAT compliance, and related customer billing queries.
We retain only limited, non-sensitive transaction metadata on our system—such as payment status,
transaction IDs, billing timestamps, order amounts, and associated account identifiers (e.g.,
platform_uuid)—solely for account management, credit balance updating, and support purposes.
Your payment interactions are governed by the privacy policies of our payment partners:
7. GDPR (European Economic Area Users)
If you are located in the European Economic Area (EEA), you have the right to:
- Access personal data processed about you
- Request correction or deletion of data
- Restrict or object to certain processing activities
- Withdraw consent where consent is the legal basis
Where applicable, consent for security features and behavioral analytics may be managed through available partner opt-out links or browser settings. Turnstile processing is carried out pursuant to legitimate interests in securing our service, or on behalf of data controllers as a data processor. Microsoft Clarity tracking will not be activated for EEA, UK, and Swiss users without explicit user consent.
8. California Privacy Rights (CCPA / CPRA)
If you are a California resident, you have the right to:
- Know what categories of personal information are collected
- Request deletion of personal information
- Opt out of the sale or sharing of personal information
- Not be discriminated against for exercising privacy rights
Do Not Sell or Share My Personal Information:
FlyingFish Space does not sell personal information directly. However, third-party
analytics and infrastructure partners may process data to ensure network performance and product optimizations.
You may opt out of behavioral tracking via:
9. Data Security
Reasonable technical and organizational measures are implemented to protect the website and limit unauthorized access. However, no method of transmission over the Internet is completely secure.
10. Children's Information
This website is not intended for children under the age of 13. We do not knowingly collect personal information from children.
11. Changes to This Privacy Policy
This Privacy Policy may be updated from time to time. Any changes will be reflected on this page with an updated effective date.
12. Contact
If you have questions about this Privacy Policy, you may contact us through the information provided on the website.