Privacy policy
Last updated 26 October 2026
The short version. The text you paste into any tool on this site is processed by JavaScript running on your own device. It is not uploaded, not stored on a server, and not logged. We have no accounts, no sign-up and no tracking cookies. The longer version below explains the ordinary web traffic that does happen when you load the page, because that part is not nothing and you deserve the detail.
1. Who runs this site
Delimit is operated by Mbule.Tech ("we", "us"). This policy covers the website at
delimit.mbule.online and every tool hosted on it.
If you are in the United Kingdom or the European Economic Area, we are the data controller for the limited personal data described in sections 4 to 6. You can reach us using the details in section 12.
2. The text you paste
This is the part most people care about, so it comes first.
Every tool on this site runs as JavaScript inside your browser. When you paste a list, drop in a file, or type into a box, that content is held in your device's memory, converted on your device, and shown back to you on your device. Our code never transmits it to us or to anyone else. There is no server-side processing to send it to.
Consequences worth spelling out:
- We cannot see what you paste, so we cannot hand it to anyone else, lose it in a breach, or recover it for you.
- Closing or refreshing the tab discards whatever is in the main paste box. It is not saved anywhere unless you use the Save button, which writes a file to your own device.
- One exception, and it is worth knowing about. The small option fields — before each, after each, find and replace with — are remembered between visits along with the rest of your settings, so your setup survives a refresh. That means anything you type into them stays in this browser until you change it. If you put something sensitive into find on a shared computer, clear the field or use Erase saved settings in the footer.
- Share setup links carry your chosen options only — separator, quotes, case, sort order and so on. Nothing you typed goes into a share link: not the paste box, and not the find, replace, before-each or after-each fields. A URL travels through browser history, referrer headers and server logs, so it is the wrong place for any of it.
- TicketLasso links do carry the record numbers you paste, because that is how they open those records in your instance. They are built on your device and go nowhere until you copy or open one, and then only to the instance named in the link. We never see them.
3. What is stored in your browser
We use your browser's localStorage to remember your preferences between
visits. This data stays on your device and is not readable by us.
| Key | What it holds | Why |
|---|---|---|
delimit.theme | light or dark | So the site does not flash the wrong theme each visit |
delimit.s | Your current tool options, including anything typed into the before-each, after-each, find and replace-with boxes | So your setup survives a refresh |
delimit.presets | Setups you saved and named | So you do not reconfigure the same job daily |
delimit.phone | Your phone formatter options: country, output format, separator and clean-up choices. Never the numbers. | So your setup survives a refresh |
delimit.compare | Your list comparer options: how the lists are split, which differences to ignore, the phone country, and the way results are shown. Never the lists. | So your setup survives a refresh |
delimit.duplicates | Your duplicates finder options: how the list is split, which differences to ignore, which view is open and the way results are shown. Never the list. | So your setup survives a refresh |
delimit.clean | Your text cleaner options: which clean-ups are on, the padding length and the way results are copied. Never the list. | So your setup survives a refresh |
delimit.extract | Your extractor options: what to find, whether repeats are removed, the phone country and number format, the minimum digits and the way results are copied. Never the text or anything found in it. | So your setup survives a refresh |
delimit.ticketlasso.instance | The instance name you typed into TicketLasso. Never the ticket numbers. Earlier visits saved it as delimit.ritm.instance; it moves to this name the next time you open the page. | So you do not type it every visit. The Forget button on that page removes it, and so does Erase saved settings. |
None of these contain the contents of the main paste box — that is never written to storage. As noted in section 2, the four small option fields are, because remembering your setup is the point of them. You can erase everything above at any time with the Erase saved settings button in the footer of every page, or by clearing site data in your browser settings. The tools work perfectly well with storage blocked.
4. What our host records
The site is hosted on Cloudflare Pages. Like every web host, Cloudflare's servers record standard request information when a page or file is served:
- Your IP address
- The date and time of the request, and the full URL requested — including any query
string, such as the
?c=parameter on a shared-setup link - Your browser's user-agent string and referring page, if any
These logs are generated and held by Cloudflare for network operation, abuse prevention and security — for example, blocking denial-of-service traffic. We do not build profiles from them, do not sell them, and do not combine them with anything else. Cloudflare processes this data as our hosting provider under its own terms and sub-processor commitments; see Cloudflare's privacy policy.
How long they are kept. We do not operate the log store and cannot set its retention ourselves; the period is determined by Cloudflare as our hosting provider, and for its edge request logs is measured in days rather than months. We do not export, copy or retain these logs separately, so we hold no independent record of your visit at all.
Because Cloudflare operates a global network, requests are served from, and logged in, whichever data centre is nearest you. Where that involves transferring personal data outside the UK or EEA, Cloudflare relies on Standard Contractual Clauses.
5. Webfonts and third-party requests
The two typefaces this site uses, Plus Jakarta Sans and JetBrains Mono, are served from
delimit.mbule.online itself, not from Google Fonts or any other font service.
The only requests that go to another domain are Cloudflare's page-view counter: your
browser loads a small script from static.cloudflareinsights.com and sends a
page-view record to cloudflareinsights.com. Section 6 says what that record
contains. It never includes the text you paste.
You can check this yourself. Open your browser's developer tools, switch to the Network tab and reload the page: every other request is to this domain.
6. Analytics
We use Cloudflare
Web Analytics to count page views. It is cookieless and privacy-preserving by design:
it does not set a cookie, does not use localStorage, does not fingerprint your
device and does not track you between websites.
It records the page URL, the referring page, and coarse information such as browser family, operating system family and country, all in aggregate. It does not collect anything that identifies you personally, and it never sees the text you paste into a tool.
We use it for one reason: to know which tools people actually use, so we build the next one for a real need rather than a guess.
7. Cookies
We do not set cookies. There is no advertising cookie, no analytics cookie and no session cookie, because there are no accounts and no server-side sessions. That is why you are not being asked to dismiss a consent banner: there is nothing to consent to.
The localStorage entries in section 3 are not cookies. They are never sent to
a server with your requests, they exist purely to remember settings you chose yourself, and
they can be erased from the footer of any page.
Cloudflare may set a cookie of its own if its security systems need to challenge suspicious traffic. That is a security function of the host, not something we configure or read.
8. Advertising
There is currently no advertising on this site and no advertising network is loaded. If we ever introduce advertising, this policy will name the network and describe what it collects from the day the first ad appears. We will not retro-fit ad tracking silently.
9. Legal basis and your rights
Where UK GDPR or EU GDPR applies, our legal basis for processing the limited data in sections 4 to 6 is legitimate interests — specifically, keeping the site available, secure and working, and understanding in aggregate whether anyone is using it. We consider this proportionate because the data is minimal, is not used to identify you personally, and is not shared for marketing.
You have the right to ask for access to your personal data, correction, erasure, restriction, portability, and to object to processing. In practice we hold almost nothing that can identify you: we have no account for you and cannot connect an IP address in a host's log to a person. If you contact us we will explain honestly what we do and do not hold rather than pretend to a process we do not have.
If you are unhappy with how we have handled your data, you can complain to your national data protection authority. In the UK that is the Information Commissioner's Office.
10. Children
This is a general-purpose text utility, not a service aimed at children, and we do not knowingly collect personal data from anyone under 13. There is nothing to sign up for and no profile to create.
11. Changes to this policy
If we change what the site collects, we will change this page and update the date at the top. Material changes — a new third-party script, or advertising — will be described here no later than the day they take effect, never afterwards.
12. Contact
Questions about this policy, or about privacy generally, can go to our contact page.
See also: Terms of use — what we do and do not promise about the tools themselves.