dc=tools
Paste SDDL or the binary descriptor. Each ACE is spelled out with its rights, who it applies to and how far it is inherited. Everything runs in your browser, so nothing you paste leaves your machine. The page's Content-Security-Policy also stops it from sending anything, which you can check in its source.
Paste SDDL from Get-Acl, dsacls or icacls /save, or the binary nTSecurityDescriptor as hex or base64 from an LDIF export. To read the SACL over LDAP you need the SD flags control (1.2.840.113556.1.4.801) and the right to read it.