Privacy Policy

Last updated: July 12, 2026

Tokens stay in your browser

Cyberway decodes, verifies, and signs JWTs entirely in your browser. Token values you paste or generate are not sent to Cyberway servers for processing.

No server-side JWT storage

We do not store JWTs on a backend. There is no account system and no database of tokens.

No local token history

The current version of Cyberway does not keep a local history of decoded tokens in localStorage or similar browser storage.

Weekly challenge samples

Cyberway publishes public sample JWTs for the weekly challenge. Those tokens are educational fixtures shipped with the product, not tokens you paste. Challenge completion is not recorded server-side, and we do not key challenges to IP addresses. Challenge answers are checked only in your browser. Your own pasted JWTs remain in the browser tab only and are cleared when the tab closes.

Analytics

Analytics are not configured by default. If Google Analytics is enabled later via environment configuration, this page will be updated to describe what is collected.

Advertising

Cyberway may display ads served by Google AdSense. Google and its partners may use cookies or similar technologies to personalize and measure ads. See Google's advertising policies for details. JWT values you paste or generate are still processed only in your browser and are not sent to Cyberway servers.

Contact

General questions: contact@cyberway.dev. Privacy questions: privacy@cyberway.dev. See also our Contact page.