Legal

Privacy Policy

Last updated: January 2025

The Short Version

FFUF is 100% client-side for wordlist processing. We do not collect, store, or transmit personal data. Your wordlist files never leave your browser. The only outbound network traffic is the fuzzing requests you configure — which pass through our Vercel serverless proxy to reach your target.

What We Do Not Collect

Your IP address through the FFUF tool itself
The URLs you fuzz or the results you receive
Wordlist files you upload (processed locally via File Reader API)
Cookies for tracking or analytics
Third-party analytics scripts

File Uploads

Custom wordlist files are processed via the File Reader API entirely in your browser. They are never sent to our servers. Closing or refreshing the page clears all data.

The Proxy Route

When fuzzing, your browser sends each request payload to our /api/proxy serverless function. The proxy makes the real HTTP request to your target and returns the result. We do not log these proxy requests or store the targets you fuzz.

Hosting & Infrastructure

FFUF is hosted on Vercel. Vercel may collect standard access logs. See Vercel's Privacy Policy for details.

Contact

Questions? Email admin@codewithneo.com