safepaste base64

Base64, both ways.

Paste into either side. What you paste is decoded or encoded as you type, in this tab, by a page that has no way to send it anywhere.

Text

Base64

Alphabet
Output

You can also drop a file here to encode it. It is read in the tab and never uploaded.

What happens to what you paste

Nothing. It is converted in this browser tab and then it is gone when you close the tab. SafePaste has no account, no database and no analytics, so there is nothing for it to be stored in.

This is enforced, not promised

The page ships a Content Security Policy of connect-src 'none'. That makes fetch, XMLHttpRequest, WebSocket, EventSource and sendBeacon fail in the browser itself, whatever the code on this page tries to do. Images and fonts are restricted to data that is already inside the file, and form-action 'none' closes form submission as a way out.

The build separately rejects the capabilities that policy cannot reliably disable, including WebRTC and programmatic navigation, and then checks the finished file. It also fails if this page gains localStorage, sessionStorage, IndexedDB, a cookie or a service worker, so the claim that nothing is remembered stays true by construction.

You do not have to take any of this on faith. Open your browser's developer tools, watch the Network tab while you use the page, and confirm that it stays empty after the page itself has loaded.

What the host can see

This page is served by Cloudflare Pages. Like any web server, it sees the request for the page itself: an IP address, a user agent, a timestamp. That happens before any of this page's code runs and it is the same for every website you visit. What it does not see is anything you paste, because nothing you paste is ever part of a request.

No cookies, no storage, no trackers

The two links that leave

The footer links to Flytrap Industries and to a Stripe donation page. Neither is contacted unless you click it. They carry no query string and no referrer, so following one tells the destination nothing about what you were doing here. If you do donate, Stripe handles that payment under its own privacy policy and SafePaste never sees your card details.

Working offline

Save this page to disk and open it again. It is a single self-contained file, so it works with no network at all, including on a machine that has never been connected to one.

This policy describes the page you are reading. It is part of the same file, so the copy you save to disk carries it too.