Privacy

Last updated: 6 September 2026

SQL Formatter is a free tool that formats SQL in your browser. This page explains exactly what happens to the data you put into it, in plain language.

The short version

Your SQL never leaves your browser. We do not have an account system, we do not ask for your name or email, and we do not sell data. We use Google Analytics to count usage, and it never receives your SQL.

The SQL you paste

Formatting, compaction and linting all run locally in your browser using JavaScript. Your SQL is not uploaded, not stored on a server, and not sent to Google Analytics. Files you open with the upload button are read in the browser only and are never transmitted.

Browser storage

The tool saves a small amount of data in your own browser using localStorage. It stays on your device, is readable only by this site, and is never sent to us. The keys are:

• sqlFormatterPrefs: your formatting settings (dialect, indentation, keyword case, linting rules)
• sqlFormatterTheme: light or dark mode
• sqlFormatterHistory: your most recent queries, capped at five
• sqlFormatterHistoryEnabled: whether history saving is on
• sqlFormatterPanelRatio: the position of the panel divider
• sqlFormatterFeedback: whether you have already answered the feedback prompt

Query history is the only one that contains SQL. You can switch it off with the history toggle, erase it with the clear-history button, or remove everything by clearing site data in your browser.

Shared links

The share button builds a link containing your query encoded in the URL. That text is in the link itself, so anyone who receives it can read the query. The encoding is not encryption. Clearing your history does not retract links you have already shared, and shared links may be stored in the browser history or server logs of whoever you send them to. Do not share links containing confidential queries or credentials.

Analytics

On sql-formatter.com we use Google Analytics 4 to understand how the tool is used. Analytics does not run on local previews.

Google Analytics receives standard web measurement data, including approximate location derived from your IP address, device and browser information, referring site, and pseudonymous identifiers.

We also send our own events describing tool usage. For example, we record that a query was formatted, copied, or failed, which dialect was selected, which settings were changed, and how long the input was. These events carry settings, dialects, lengths, and success or error categories.

They never contain your SQL text, and never free-text you have typed. We also strip query strings and URL fragments from the page address we report, which means shared links containing SQL are not passed to Analytics.

Google acts as our analytics provider and processes this data on its own infrastructure, which may involve transfers outside your country. Google's handling is governed by its own policies.

Cookies

Google Analytics sets cookies in your browser (names beginning _ga) to distinguish repeat visits. We set no advertising cookies and run no advertising networks. The preferences described under Browser storage are not cookies and are never transmitted.

Hosting

The site is served as static files by Vercel. Like any web host, Vercel processes the requests needed to deliver pages, which involves your IP address and standard request information. We do not operate an application server, and there is no database holding user data.

Feedback

The feedback prompt records which of a fixed set of options you chose (formatting presets, batch formatting, dialect support, query explanation, an editor extension, or other). If you choose the editor extension we also record which editor you picked from a fixed list as an analytics event. That choice is the only part that reaches Analytics.

The optional written note is handled differently. It is never sent to Analytics and never reaches our servers. Choosing to send it opens your own email application with the text already filled in, so you can read and edit exactly what is sent before it leaves your device, and you can close it without sending. We record only that an email window was opened, never its contents.

If you email us, your message and address reach us through your own email provider and we keep them only to reply. Please do not send confidential queries or credentials by email.

Your choices

• Turn off query history with the history toggle, or clear it with the clear-history button.
• Block analytics with a browser content blocker, browser tracking protection, or Google's opt-out add-on. The formatter works fully with analytics blocked.
• Clear all site data through your browser's privacy settings to remove every stored preference and query.
• Simply avoid the share button if you do not want a query encoded in a URL.

Retention

Browser storage stays on your device until you clear it. Analytics data is retained according to the retention period configured in Google Analytics, after which Google deletes it. We keep email correspondence only as long as needed to respond.

Children

This is a developer tool and is not directed at children. We do not knowingly collect information from children.

Your rights

Depending on where you live, including the UK, the EEA, and some US states, you may have rights to access, correct, or delete personal data relating to you, or to object to its processing. Because we operate no accounts and hold no database, most data described here is either on your own device, where you control it directly, or held by Google as our analytics provider. If you want to raise a request or ask what we hold, contact us below.

Changes

If this policy changes we will update the date at the top of this page. Material changes will be described here rather than made silently.

Contact

Questions about privacy: thesqlformatter@gmail.com

Back to SQL Formatter