Privacy

Validation of VAST XML still runs in your browser via WebAssembly. The CLI and library do not send tags unless you pass --contribute-sample.

What we keep

When you paste or fetch a tag in the tester, inspector, validator, or the IAB Tech Lab VAST Tester fork, vastlint.org may store a copy of that XML. Known device IDs, IPs, and consent query parameters are stripped from that XML before storage. The hostname of a fetched tag URL may be stored. Cloudflare also supplies the country and the network owner (ASN number and organization name, for example an ISP or a company network). We use that to see which networks send tags. We do not store the IP address. Built-in sample scenarios are not sent. Tags are used to improve validation rules and are not published.

Opt out

Each tool page has a Don't send my tags control. That sets a flag in this browser only. The explicit contribute this tag button on the validator still sends a sample if you click it.

Analytics

The public site uses Google Analytics for page traffic. That is separate from tag storage.