Support / Privacy
The pasted header stays in the page.
Filenames can contain personal or confidential names. Inspection runs in browser memory; the pasted header, decoded filename, warnings, selected platform, MIME type, and reconstructed output are not sent to the measurement provider.
Optional measurement requires consent
If you choose “Allow this session,” HeaderName stores the consent choice, a QA-disable marker when applicable, and one-per-session goal deduplication flags in sessionStorage. It may send only tool_start, header_audit_complete, or header_audit_unknown. Denying consent stores the denial for this tab and does not load the provider script.
Network boundary
The inspector itself does not submit the header. After consent, the Yandex provider receives ordinary connection metadata such as IP address and browser information and may use cookies. Goal calls contain only allowlisted event names, with no input or result payload. Automatic page hits, titles, link tracking, session replay, and automatic goals are disabled. Provider loading requires the exact approved HTTPS origin and job route with no query or hash. DNT, GPC, QA, webdriver, synthetic, and mismatched-origin sessions are excluded.
Clipboard boundary
Only the reconstructed example is written to the clipboard, and only after the user selects “Copy example.” The original pasted header is not copied automatically.
Page and session lifetime
Header input and results remain in DOM and JavaScript memory while the page is open. Measurement preferences and deduplication flags use this tab's sessionStorage and expire with the browser session under normal browser behavior.