Privacy & data
Unlike our other tools, GetJSON does store what you give it — that is the whole product. Here is exactly what, for how long, and who can read it.
What is stored
- The JSON document you publish, and an optional label, in a Postgres database hosted by Supabase.
- Timestamps — created, updated, expires — and a view counter.
- A hash of your edit token. The token itself is shown to you once and never stored, so we cannot recover it for you and cannot use it ourselves.
- Your account ID, if you published while signed in, so the endpoint can appear on your dashboard.
How long
A maximum of three days for anonymous endpoints and six days for endpoints owned by a signed-in account. These ceilings are enforced by a database trigger, not by the interface, so no API call can extend beyond them. Expired documents are filtered out of every read immediately and physically deleted by a scheduled job.
Deleting an endpoint — from the dashboard, or with a DELETE request — removes the row straight away.
Signing in
Sign-in is optional and uses Google. The sign-in button is rendered in this page by Google Identity Services, loaded from accounts.google.com, so the consent prompt comes from Google directly and you are never redirected elsewhere. Google returns a signed token identifying you, which our backend verifies against Google's public keys before creating a session.
We receive your email address and a Google account identifier. We never see your Google password. Your session is stored in this browser; signing out clears it. Deleting your account removes every endpoint you own, because the rows cascade. Loading Google's sign-in script means Google can see that you visited this page — if that matters to you, simply do not sign in: every feature except the six-day retention and the cross-device list works signed out.
What is in this browser
- A theme preference.
- A local list of endpoints you created on this device, including anonymous ones, with their edit tokens, so the dashboard can show them. This never leaves your browser. Clearing site data loses the list — it does not delete the endpoints, which still expire on schedule.
Analytics and advertising
Aggregate analytics through Google Analytics: page views, approximate country, device type, referrer. Document contents are never sent to analytics. The site is free and supported by advertising; ad space is reserved and clearly marked, and when advertising is switched on the network may set cookies under its own policy. Ads never have access to your documents.
Abuse and removal
We will remove content that is unlawful or that is being used to host malicious payloads. Because everything expires within days by design, most issues resolve themselves. To report something, or to ask for a specific endpoint to be removed, email help@getapps.tech with the URL.
No guarantees
GetJSON is a free scratchpad. There is no uptime commitment, no backup, and no recovery of deleted or expired data. Do not build anything you care about on top of it.