Privacy Policy

1. The Core Privacy Fact: Your Passwords Stay Private

The most important privacy fact about this site: we never see, receive, or store the passwords you generate. This is not a policy promise — it is a technical reality.

Our password generator operates entirely within your web browser using JavaScript. When you click "Generate," your browser uses its own built-in crypto.getRandomValues() cryptographic function to create a password. This process involves only your device — no data is sent to our servers at any point during password generation.

You can verify this yourself: disconnect your device from the internet, then visit our site and generate a password. It will work perfectly in airplane mode, confirming that no network communication is occurring during generation.

We have no database of generated passwords, no logs of what characters you selected, and no record of how many passwords you've generated. The tool is architecturally incapable of collecting this information.

2. What Information We Do Collect

While we don't collect passwords, like virtually all websites we do collect some standard information through the normal operation of our web server and third-party services:

2.1 Web Server Logs

Our web server automatically records standard access log data whenever any page on our site is requested. This includes: your IP address, the page requested, the date and time of the request, your browser type and version, the referring website (if you clicked a link to reach us), and the HTTP status code returned. This data is used for security monitoring, diagnosing technical problems, and understanding general traffic patterns. It is not used to identify individuals. Server logs are retained for a standard period (typically 30–90 days) and then deleted.

2.2 Cookies

Cookies are small text files stored in your browser. Our site uses cookies in two contexts: advertising (via Google AdSense) and analytics (via Google Analytics). We do not use cookies for any first-party tracking, user accounts, or marketing purposes of our own. The specific cookies used are described in detail in the Google AdSense and Google Analytics sections below.

2.3 Information You Voluntarily Provide

If you contact us via email (at [email protected]), we receive whatever information you include in your message — typically your email address and the content of your query. We use this only to respond to your inquiry and do not add you to any mailing lists or share your email with third parties. Our email communications use ProtonMail, an end-to-end encrypted email service.

3. Google AdSense

We display advertising on this site through Google AdSense (publisher ID: pub-9284100006131640). Advertising revenue allows us to provide the password generator and all educational content at no cost to users.

Google AdSense uses cookies — including the DoubleClick DART cookie — to serve ads that are relevant to your interests based on your browsing history across websites that use Google's advertising services. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to our site and other sites on the internet.

Specifically, Google may use the following in connection with ads on our site:

• • DoubleClick DART cookie: Used by Google to serve ads based on your visit to this site and other sites on the internet. It is set on the google.com domain.
• • Google advertising cookies: Used to measure ad performance and enable remarketing features.
• • Interest-based advertising: Google may use information about your browsing behavior to show you personalized ads.

You can opt out of personalized advertising by visiting Google Ads Settings, or by visiting aboutads.info to opt out of interest-based advertising from participating companies.

For complete details about how Google uses data when you use our site, see Google's Privacy Policy at policies.google.com/privacy.

4. Google Analytics

We use Google Analytics (tracking ID: G-TH79WSY5E8) to understand how visitors use our site — which articles are most read, how people navigate between pages, and general traffic patterns. This helps us improve our content and make the site more useful.

Google Analytics collects anonymized data including: pages visited, time spent on each page, general geographic region (country/city level, not specific location), browser and device type, and how you arrived at the site. This data is aggregated — we see trends and statistics, not individual user profiles.

Google Analytics uses cookies (including _ga and _gid) to distinguish between visitors and to track sessions. These cookies do not collect personally identifiable information.

You can opt out of Google Analytics tracking by installing the Google Analytics Opt-Out Browser Add-on.

5. How We Use Information

We use the information collected for the following purposes only:

• Site operation and security: Server logs are used to detect and prevent abuse, investigate security incidents, and diagnose technical problems.
• Improving content and user experience: Analytics data helps us understand which articles are helpful, identify pages with high bounce rates, and prioritize improvements.
• Advertising: Google AdSense uses cookies to serve relevant advertisements. Ad revenue funds the site.
• Responding to inquiries: Email contact information is used only to respond to the specific inquiry sent.

We do not sell data, do not use data for any form of marketing, and do not combine data from different sources to build individual user profiles.

6. Third-Party Links

Our articles and tool pages may contain links to external websites, such as references to NIST publications, security research papers, or recommended security tools. When you click these links and leave our site, this Privacy Policy no longer applies.

We are not responsible for the privacy practices of third-party websites. We recommend reviewing the privacy policy of any site you visit. External links on our site are provided for informational purposes only and do not constitute an endorsement of the linked site or its privacy practices.

7. Children's Privacy

This website is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. Our content — password security guidance, cybersecurity articles, and privacy information — is intended for adults and older teenagers who manage their own online accounts.

If you believe we have inadvertently collected information from a child under 13, please contact us at [email protected] and we will promptly delete such information.

8. GDPR Rights for European Users

If you are located in the European Economic Area (EEA), you have certain rights under the General Data Protection Regulation (GDPR) regarding any personal data we hold about you:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request correction of inaccurate personal data.
• Right to erasure: You may request deletion of your personal data in certain circumstances.
• Right to restrict processing: You may request that we restrict the processing of your data.
• Right to data portability: You may request your data in a structured, machine-readable format.
• Right to object: You may object to our processing of your personal data.

To exercise any of these rights, please contact us at [email protected]. Note that the practical scope of these rights may be limited given that we collect minimal personal data. For advertising-related data processed by Google, you should exercise your rights directly with Google via their privacy controls.

9. California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information:

• Right to know: You have the right to request information about the categories of personal information we collect, the purposes for which we use it, and whether we sell or disclose it to third parties.
• Right to delete: You have the right to request deletion of personal information we have collected from you.
• Right to opt out of sale: We do not sell personal information. We do use Google AdSense, which may share data with advertising partners as described in Section 3.
• Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise California privacy rights, contact us at [email protected].

10. Data Security

We take reasonable technical and organizational measures to protect the limited information we collect. Our site is served over HTTPS, which encrypts all data in transit between your browser and our server. Email communications use ProtonMail's end-to-end encryption.

However, no internet transmission or electronic storage is perfectly secure. We cannot guarantee absolute security of information transmitted to or stored on our systems. If you discover a security vulnerability in our website, please report it to [email protected]. We take all security reports seriously.

11. Changes to This Policy

We may update this Privacy Policy from time to time as our practices change, as new legal requirements emerge, or as we add new features to the site. When we make changes, we will update the "Last Updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically. Continued use of the site after any changes constitutes your acceptance of the revised policy. If we make material changes that significantly affect how we handle your data, we will make reasonable efforts to provide notice.

12. Contact Us

If you have any questions about this Privacy Policy, concerns about how your data is handled, or wish to exercise any data rights, please contact us: