🔒 Privacy Policy

Privacy Policy

Last updated: June 2025

🔒 Privacy-First Philosophy

Your privacy is fundamental to our service. This Privacy Policy explains how we collect, use, and protect your information when you use our Password Generator platform. We believe in minimal data collection and maximum user privacy.

📊 Information We Collect

Information We DO NOT Collect:

• Generated passwords (all processing is done locally in your browser)
• Personal password data or any sensitive credential information
• Password history or usage patterns
• Personal identification data or account information
• Email addresses or contact information (unless you contact us voluntarily)
• Custom user tracking or behavioral analytics

Information That May Be Collected by Our Hosting Provider:

• Basic Server Logs: IP addresses, browser type, pages visited (standard web server logs)
• Technical Data: Operating system, device type, screen resolution (for website optimization)
• Geographic Data: General location (country/region) based on IP address
• Website Performance: Page load times and basic error reports

Information We Collect Directly:

• Contact Form Data: Only when you voluntarily contact us through our contact form
• Cookie Preferences: Your choices regarding cookie consent

🛡️ How We Protect Your Data

• Local Processing: All password generation happens in your browser - nothing is sent to our servers
• No Password Storage: We never store, log, or have access to your generated passwords
• Encrypted Communications: All data transmission uses industry-standard SSL/TLS encryption
• Minimal Data Collection: We only collect what's absolutely necessary for basic website functionality
• No Custom Tracking: We don't use custom analytics or user tracking systems

🍪 Cookies and Local Storage

We use minimal cookies and local storage for:

• Saving your preferences (password length, character options) - stored locally only
• Maintaining your password history locally (never shared or uploaded)
• Remembering your cookie consent preferences
• Essential website functionality and security

📊 Third-Party Services

Hosting Provider Analytics:

Our website is hosted by a third-party provider that may collect standard web analytics data including:

• Basic visitor statistics (page views, unique visitors)
• Technical performance metrics
• Geographic distribution of visitors
• Browser and device information

This data is collected at the server level and is typical for all websites. We do not have access to individual user data from these analytics.

Google AdSense:

We use Google AdSense to display advertisements. Google may collect data for ad personalization. You can:

• Opt out of personalized ads through your Google Ad Settings
• Use ad blockers to prevent ad tracking
• Disable third-party cookies in your browser

🌍 Your Privacy Rights

All Users:

• Access: Request information about data collected about you
• Correction: Request correction of any inaccurate data
• Deletion: Request deletion of your data
• Opt-out: Disable cookies and tracking through browser settings

EU/UK Users (GDPR Rights):

• Right to be Forgotten: Complete erasure of your data
• Data Portability: Receive your data in a machine-readable format
• Restriction of Processing: Limit how your data is processed
• Object to Processing: Object to data processing for legitimate interests

California Users (CCPA Rights):

• Know: What personal information is collected and how it's used
• Delete: Request deletion of personal information
• Opt-out: Opt out of the sale of personal information (we don't sell data)
• Non-discrimination: Equal service regardless of privacy choices

📞 Contact for Privacy Issues

For privacy-related questions or to exercise your rights:

• Email: passgen2025@gmail.com (Subject: "Privacy Request")
• Response Time: We respond within 30 days for most requests
• Verification: We may require identity verification for security

🔄 Data Retention

• Generated Passwords: Never stored - only exist in your browser memory
• Contact Form Data: Retained for 90 days for support purposes, then deleted
• Server Logs: Managed by hosting provider, typically retained for 30-90 days
• Cookies: Expire based on type (session cookies delete when browser closes)

🔒 Data Security Measures

• Encryption: All data transmission uses HTTPS/TLS encryption
• Access Controls: Limited access to any collected data
• Regular Updates: Security patches applied promptly
• Incident Response: Procedures in place for any security incidents

📱 Children's Privacy

Our service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we become aware of such collection, we will delete the information immediately.

🔄 Policy Updates

We may update this Privacy Policy occasionally. Changes will be posted on this page with an updated "Last modified" date. For significant changes, we may provide additional notice on our website.

🔐 Technical Privacy Details

Password Generation Process:

1. You select password parameters (length, character types)
2. Your browser generates the password locally using cryptographic functions
3. The password appears in your browser - never sent to our servers
4. You copy/download the password directly from your device
5. Password is removed from memory when you close the page

Zero-Knowledge Architecture:

Our system is designed so that:

• We cannot see what passwords you generate
• We cannot access your password history
• We cannot track your password creation patterns
• We have no way to recover or view your passwords
• All sensitive operations happen exclusively on your device

🌐 International Data Transfers

Since we don't collect personal data or passwords, there are no international data transfers of sensitive information. Any basic server logs are processed according to standard web hosting practices and applicable data protection laws.

📋 Data Processing Legal Basis

Where we do process minimal data, our legal basis is:

• Legitimate Interest: Basic website functionality and security
• Consent: Contact form submissions and cookie preferences
• Legal Obligation: Security monitoring and abuse prevention

🔍 Your Right to Information

You have the right to know:

• What personal data we hold about you (very minimal)
• How we use that data
• Who we share it with (we don't)
• How long we keep it
• Your rights regarding that data

⚖️ Compliance and Certifications

SafePassGen adheres to:

• GDPR: General Data Protection Regulation (EU)
• CCPA: California Consumer Privacy Act (US)
• PIPEDA: Personal Information Protection principles (Canada)
• Privacy by Design: Built-in privacy protection

🚨 Data Breach Procedures

In the unlikely event of a data breach:

1. Immediate Assessment: Determine scope and impact
2. Containment: Stop the breach and secure systems
3. Notification: Inform users within 72 hours if required
4. Authorities: Report to relevant data protection authorities
5. Remediation: Implement additional security measures

🤝 Third-Party Privacy Practices

Google AdSense Privacy:

Google AdSense may use cookies and tracking. You can:

• Visit Google's Privacy Policy for detailed information
• Use Google Ad Settings to control personalization
• Enable "Do Not Track" in your browser
• Use ad blocking software

Hosting Provider Privacy:

Our hosting provider processes basic server logs according to their privacy policy and standard hosting practices. This is minimal technical data required for website operation.

📱 Mobile Privacy

When using SafePassGen on mobile devices:

• All processing remains local to your device
• No additional permissions are required
• Works in airplane mode (once loaded)
• No app installation required
• Same privacy protections as desktop

🔄 Privacy Policy Changes

We will notify you of significant privacy policy changes through:

• Prominent notice on our homepage
• Updated "Last modified" date
• Email notification (if you've contacted us)
• Clear highlighting of changes

📞 Privacy Contact Information

✅ Privacy Checklist

We commit to:

• ✅ Never storing your passwords
• ✅ Processing all passwords locally on your device
• ✅ Collecting minimal data necessary for website function
• ✅ Being transparent about any data we do collect
• ✅ Giving you control over your privacy choices
• ✅ Responding promptly to privacy requests
• ✅ Keeping this policy updated and clear
• ✅ Following privacy by design principles

🎯 Summary

SafePassGen's privacy approach is simple: your passwords are yours alone. We've designed our service so that we cannot access, store, or view your passwords under any circumstances. We collect minimal data necessary for website operation and are fully transparent about our practices.

If you have any questions about this privacy policy or our data practices, please don't hesitate to contact us. Your privacy and security are our top priorities.