Privacy Policy

Last updated: August 10, 2026

PasswordForge is built to be privacy-first. This policy explains, plainly and in full, what we do and do not do with your data. The short version: we do not collect personal data, we do not use cookies, and all passwords are generated locally inside your browser.

No Data Collection

We do not collect, store, or transmit any personal information. When you configure the password generator, every setting and every generated password is processed in your browser. No passwords, no length choices, and no character set selections are sent to any server operated by us.

Passwords Generated Locally

Our password generation runs entirely client-side using the Web Crypto API (crypto.getRandomValues()). This means the password you generate is created on your device, by your device, and never leaves your browser. We have no way to see, log, or recover any password generated with this tool.

No Cookies

This site does not set cookies, with one exception: your theme preference (light or dark mode) is stored in your browser's localStorage. This data never leaves your device and is not shared with us or any third party.

No Analytics

We do not run analytics, session recording, fingerprinting, or any other measurement script on this site. There is no Google Analytics, no Plausible, no Vercel analytics, and no marketing pixels loading in the background.

No Third-Party Tracking

The only third-party resources loaded by this site are:

• Tailwind CSS (CDN) and Google Fonts (Inter, JetBrains Mono) — loaded for styling and typography. We do not control what these providers log, but we send them no data ourselves.

No advertising networks load on this site, and we do not sell or share data with any third party.

Content

Article pages include external reference links to sources we cite. Those links open the destination site directly. We do not append tracking parameters to outbound links.

Cloudflare Pages

This site is hosted on Cloudflare Pages. Cloudflare, as the hosting provider, may log standard request metadata (IP address, request time, path) as part of operating the edge network. We do not have access to any user-identifying logs from Cloudflare and do not use them.

Contact

Questions about this policy can be directed to privacy@password-forge.pages.dev. We will respond to legitimate privacy inquiries and update this policy if our practices change.