Privacy Policy

Last updated: October 2026

EscapeHTML ("we", "us") operates escapehtml.com. This page explains what data we handle and the choices you have. The short version: the text or entity string you paste is processed on your own device and never leaves your browser.

The tool this policy covers

The tool this page covers is EscapeHTML, an HTML entity encoder and decoder. Put simply, it escapes text into HTML entities to prevent cross-site scripting and decodes entities back to plain text, with named, decimal and hex styles, and the way it does so is this: it escapes the five characters that change meaning in HTML — ampersand, angle brackets and both quote styles — and because decoding is single-pass, an escaped sequence like A resolves back to the literal text A rather than to A, which is exactly the behavior that keeps a second decode from turning sanitized input back into live markup. Everything stated here applies to that tool and the values it handles, and to nothing else.

Everything the tool works with — the text or entity string you paste — is handled locally. It is usually reached for things like checking whether a payload would survive one decode, and because nothing is transmitted a visitor can close the tab knowing no copy was made anywhere.

What you enter

Every result here is produced by JavaScript running in your browser. Your inputs are used only to render the answer on the page: they are not transmitted to a server, stored, sold, or shared. The calculation needs nothing beyond what is already on the page — it simply escapes the five characters that change meaning in HTML — ampersand.

Advertising, cookies and your choices

Two things can set cookies on escapehtml.com: our own consent flag, which remembers your answer to the banner, and the third-party advertising network, which may use them for interest-based ads. Refuse them all and the tool still behaves exactly as before.

Analytics and aggregate statistics

We watch which of the EscapeHTML tools get used, in aggregate, so that effort goes where it is useful. That is the extent of it — no individual profile, and no analytics event ever includes the values you entered.

What you paste is not uploaded

Code and configuration dropped into a tool here do not leave the page. That is worth saying plainly, because the opposite is common, and a tool that uploads what you give it is a different proposition altogether.

How long data is kept, and how it is protected

There is nothing of yours to keep, so there is no retention period to describe for calculator input: it exists only in your browser tab and disappears when you leave. The site is served over HTTPS throughout.

Children's privacy

EscapeHTML provides general-purpose tools and is not directed at children under 13. We do not knowingly collect personal information from children.

Your privacy rights

Wherever you are, you can ask what we hold about you, ask for it to be corrected or erased, and object to how it is used. Given how little EscapeHTML collects, the answer will usually be short, but the right stands.

Changes to this policy

If the way we handle data ever changes, this page will be revised and the date at the top adjusted accordingly. Continuing to use the site after an update means you accept the revised policy.

Technical data gathered automatically

The hosting layer sees what any web server sees — client address, requested path, user agent, time — and that is the limit of it. None of those records contains the values you type into the HTML entity encoder and decoder, because those never reach the server.

How to reach us about privacy

For any privacy question, use the contact page and we will reply.