Skip to main content
[Q] QuadletGen 100% Client-Side YAML Parser
Presets Navigation

Last Updated: November 12, 2026

Privacy Policy and Zero-Upload Data Guarantee

QuadletGen (quadletgen.com) is engineered so your container manifests, private image names, host mount paths, and environment secrets never leave your device.

1. Zero-upload guarantee for docker-compose.yml files and environment secrets

Every conversion step on QuadletGen runs locally inside your web browser's volatile RAM. When you paste a docker-compose.yml manifest, type a docker run or podman run command, select a local .yml, .yaml, or .txt file, extract database passwords into a .env unit, or download a .zip archive, zero bytes of your configuration are uploaded to any server.

  • No backend conversion API. QuadletGen is deployed as pure static HTML, CSS, and client-side JavaScript assets with no database and no form submission endpoints.
  • No secret harvesting. Environment variables, API tokens, TLS paths, container image URLs, and filenames stay strictly inside your browser tab memory and are discarded as soon as you close or refresh the page.
  • Independently verifiable. Open your browser DevTools Network inspector while pasting manifests or clicking Download .zip Bundle to confirm zero outbound payload requests carry your input.

2. Static edge delivery and security logs

QuadletGen is served globally over HTTPS through Cloudflare Workers Static Assets. Like any website on the public internet, Cloudflare processes standard HTTP transport metadata (requesting IP address, TLS cipher metadata, User-Agent header, HTTP status code, and requested static URL path) transiently at the network edge for TLS termination, caching, and automated DDoS or abuse mitigation. QuadletGen does not maintain user accounts, login sessions, or application-level access logs linking IP addresses to workbench activity.

3. Anonymized Google Analytics 4 (GA4) event policy

When production measurement is configured on quadletgen.com, we use Google Analytics 4 solely to understand aggregate page traffic and high-level workbench usability, such as which preset routes are visited and whether operators export output via clipboard copy or ZIP download (quadlet_export).

  • Strict payload scrubbing. Analytics events carry only coarse action labels (for example copy or zip) and preset route paths. Event parameters never contain YAML text, CLI arguments, stack names, secret keys, or uploaded filenames.
  • IP anonymization and ad-signal suppression. GA4 initialization enforces IP anonymization (anonymize_ip: true) and disables Google Signals and advertising personalization features.
  • Blocker friendly. If you use uBlock Origin, Brave Shields, Firefox Enhanced Tracking Protection, Privacy Badger, or the official Google Analytics Opt-out Browser Add-on, all Quadlet conversion and ZIP packaging features continue working identically with zero warnings or degraded functionality.

4. Cookies and outbound third-party links

QuadletGen sets zero authentication or preference cookies of its own. When GA4 loads on the production domain without a content blocker, Google Analytics sets first-party measurement cookies (_ga) to distinguish aggregate repeat visits from single-page bounces. You can clear or block cookies in your browser settings at any time.

Pages on QuadletGen may link to upstream Podman documentation or clearly disclosed Linux VPS providers (marked rel="sponsored noopener" where commercial). Clicking an external link navigates you to that third party's domain under its own privacy notice.

5. GDPR (EEA/UK) and CCPA/CPRA (California) privacy rights

Depending on where you live, including the European Economic Area, the United Kingdom, Switzerland, or California, you have statutory rights regarding personal data:

  • Right to know, access, and delete. Because QuadletGen never collects names, email addresses (unless you email us directly), user accounts, or uploaded container files, we hold no personal profile associated with your browser session. If you email us, you may request access to or deletion of your correspondence at any time.
  • No sale or cross-context behavioral sharing. QuadletGen does not sell, rent, or trade personal information as defined under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), nor do we share personal data for cross-context behavioral advertising.
  • Right to object or restrict analytics. EEA and UK visitors may block analytics scripts via browser privacy controls or contact us with questions regarding our legitimate-interest safeguards and data minimization architecture.

6. Contact for privacy inquiries

For privacy questions, GDPR or CCPA/CPRA requests, or security disclosures, contact hello@quadletgen.com. Also review our About page and Terms of Service.