Privacy policy
**The short version: our tools run in your browser, and we do
not want your passwords.**
What we do not do:
- We do not transmit, log or store anything you type into our tools — the generator and the
strength checker are JavaScript running on your device.
- We do not set advertising or tracking cookies.
- We do not sell or share personal data, because we do not collect it.
What happens when you visit:
- This site is served as static files by GitHub Pages, which — like any web host — records
standard request logs (IP address, user agent, requested URL) for security and abuse
prevention. We do not receive or analyse those logs per visitor.
- If you email us, we hold your message and address for as long as it takes to deal with it.
Your choices: block JavaScript and the pages still read normally — only the interactive tools
stop working. If you want to check a password without typing it anywhere, use our reasoning
guide instead and test a near-identical variant.
Controller. The controller for this site is Kokal Operations Ltd, a company registered in England and Wales. Contact: privacy@passwordsecuritycenter.com. This site is part of the ZAHA Lab network (zahalab.com).
Your rights (UK and EU visitors). Where UK GDPR or EU PECR apply you have the right to be informed, to access, to rectification, to erasure, to restrict or object to processing, and to data portability. The only personal data we hold is what you send us directly — for example an email to our contact address — and we keep it only as long as needed to answer you and meet our legal obligations. We carry out no profiling. You can complain to your supervisory authority at any time; in the UK that is the Information Commissioner's Office (ico.org.uk).