Privacy, local processing and sharing

Privacy & local processing

How your input is classified

• Safe — public regex patterns, cron expressions, formatting preferences, colour values. May be serialized into a share URL.
• Sensitive — JSON payloads, API responses, request bodies, URLs with identifiers, .env key names. Withheld from a share URL unless you explicitly opt in.
• Secret — JWTs and their signing secrets, Authorization headers, cookies, webhook signing secrets, .env values, generated passwords. Never serialized into a URL, never included in Copy Findings, never sent to analytics — there is no option that changes this.

Analytics

Product events carry categorical properties only — a tool id, a mode, a verdict, a finding count, whether the input was a built-in fixture. Artifact content, tokens, URLs, headers, regex test data and request bodies are filtered out by an allow-list before any event is sent, and the filter is covered by tests.

Sharing safely

Share & Export

URL sharing

When you use any tool, the URL updates automatically with your current state. Copy the URL from your browser and share it. Your recipient opens the same tool in the same state — pattern loaded, test text included, flags set.

RegexLab:
      /tools/regexlab?p=%5Ed%7B3%7D&f=g&t=123-456-789

    CronBuilder:
      /tools/cronbuilder?cron=*/5+*+*+*+*

    Parameters:
      p  = URL-encoded regex pattern
      f  = flags (g, i, m, s, u, y)
      t  = URL-encoded test text
      cron = cron expression

Code export

RegexLab generates working code snippets in 4 languages:

const regex = /^\d{3}-\d{3}-\d{4}$/g;
    const matches = text.match(regex);

import re
    pattern = r'^\d{3}-\d{3}-\d{4}$'
    matches = re.findall(pattern, text)

$pattern = '/^\d{3}-\d{3}-\d{4}$/g';
    preg_match_all($pattern, $text, $matches);

re := regexp.MustCompile(`^\d{3}-\d{3}-\d{4}$`)
    matches := re.FindAllString(text, -1)