DiffKit

Privacy

Short version: what you paste stays in your browser. There are no accounts, no database and no cookies of our own.

Comparisons run on your device

Every tool on DiffKit (the diff checker, JSON, XML, YAML, SQL, HTML and CSV compare, list comparison and the merge conflict resolver) runs as JavaScript inside your browser tab. Files you open are read locally and never uploaded.

The optional AI buttons

Explain changes and Suggest a merge with AI are the only features that send content off your device, and only when you click them. “Explain changes” sends the unified patch (capped at about 24,000 characters), and “Suggest a merge” sends a single conflict plus up to 12 lines on each side. The request goes through Vercel AI Gateway to an OpenAI model, is answered, and is not stored by DiffKit. Don’t use the AI buttons on code you’re not allowed to share with third parties. Short-lived, in-memory counters of requests per IP address prevent abuse and are discarded automatically.

What’s saved in your browser

DiffKit uses your browser’s localStorage for two things:

  • Display preferences: side-by-side or unified view, ignore options, folding.
  • Your text, but only if you tick “Remember … in this browser” on a tool. Untick it to delete that tool’s saved text.

Analytics

We use Ahrefs Web Analytics to count page views. It is cookieless and doesn’t collect personal data or anything you type into the tools.

Hosting

The site is served by Vercel, which keeps standard server logs (such as IP address and requested URL) for security and operations.

Last updated 27 September 2026.