Privacy
Cookies are credentials. A session cookie is often enough to log in as you. Converter input never leaves your device. The session check and credential tools encrypt the paste in the browser, then send it to this site and to Anthropic.
Last updated:
Converter
Never leaves your browser
Session checker
Encrypted and sent for verification
Credentials
Verified server-side, tokens are not stored
Public API
Paste is sent to this site over HTTPS
The conversion happens in your browser
Every parser and serialiser on this site is JavaScript that runs on your machine. The cookie parsing and formatting is done entirely on your device, not on a server.
The Claude session check leaves your browser
The Check cookie page sends an encrypted paste to this site’s own backend. That backend calls Claude with the session cookie to read the account, plan and usage windows.
Getting a credential file also leaves your browser
The credential page first runs the same encrypted check. If you then convert, the paste goes to this site’s backend and to Anthropic so a Claude Code credentials file can be minted. The file is returned to your browser. OAuth tokens are not stored on the server. Convert is gated by a Cloudflare Turnstile captcha.
The public API sends the paste to the server
POST /api/v1/convert, /api/v1/check and /api/v1/credential accept JSON over HTTPS. Unlike the website converter, the convert route parses on the server. Check and credential call Anthropic the same way the website tools do. Use only a session you control.
Anonymous usage statistics
The site records anonymous statistics about how it is used — which formats are converted and how often — through Yandex Metrika. There is no Google Analytics, and nothing that identifies you is stored for that purpose.
No third-party trackers
There is no Google Analytics and no tag manager. The site loads Yandex Metrika for first-party usage statistics — pageviews and the conversion goals on this site. The only cookie this site sets itself is cclang, which remembers the language you picked so you are not redirected by geolocation on your next visit. It contains one of three values: en, ru or zh.
What the server logs
The web server keeps standard access logs — IP address, timestamp, requested path, user agent. Those logs do not include the contents of a paste. Converter input never leaves your device. Checker and credential pastes are encrypted in the browser before they are sent.
Language and geolocation
Your approximate country is derived from your IP address by the web server, using an offline database, purely to redirect a first visit to the matching language. No location data is stored and nothing is sent to a third-party geolocation service.
Still, be sensible
If you are pasting live session cookies for an account that matters, close the tab when you are done, and remember that anything you copy sits in your clipboard afterwards. Treat exported cookie files the way you would treat a password file.
Not affiliated with Anthropic
This is an independent open tool. It is not made by, endorsed by, or connected to Anthropic PBC in any way. Claude is a trademark of Anthropic PBC, used here only to refer to it.