Privacy Policy

The 30-second summary

• Passwords, passphrases, and PINs are generated inside your browser and are never transmitted, logged, or stored by this site. There is no server that could receive them.
• The site has no accounts and no forms, so it never asks for your name, email, or any identifying detail.
• Three third-party scripts run here — Google AdSense (ads), Google Analytics 4, and Microsoft Clarity (usage analytics) — and they use cookies. You can opt out of the ad personalization; the sections below tell you how.
• A few tool preferences (like your chosen password length) live in your browser's localStorage and go nowhere.

What this site structurally cannot see

Generation runs on your device via the Web Crypto API (crypto.getRandomValues()). Clicking "generate" fires no network request. This is not a policy decision I could quietly reverse in a database setting — the code that would upload a password does not exist. The same applies to the strength checker: whatever you type into it is evaluated locally and never sent anywhere. Because nothing is collected, there is nothing for me to sell, leak, or hand over.

Advertising cookies (Google AdSense)

This site is funded by ads served through Google AdSense. As a third-party vendor, Google uses cookies — including the DoubleClick cookie — to serve ads based on your visits to this site and other sites across the web. These cookies enable Google and its partners to show you personalized ads; they do not receive the values you generate here, but they do observe that your browser visited this site.

Your opt-outs, in order of thoroughness:

• Turn off ad personalization for your Google account at Google Ads Settings.
• Opt out of many third-party advertising vendors at once via the NAI opt-out tool or aboutads.info/choices.
• Block or clear cookies entirely in your browser settings — the tools on this site work fine without them.

Usage analytics (GA4 and Microsoft Clarity)

I use two analytics services to see which pages get read and where the tools confuse people: Google Analytics 4, configured with IP anonymization, records page views and aggregate interaction events (for example, that a generate button was clicked — never the output); Microsoft Clarityrecords anonymized interaction patterns such as scrolling and clicking, with its built-in masking of typed input enabled. Google's handling of GA data is described in the Google Privacy Policy; Microsoft's in the Microsoft Privacy Statement.

localStorage on your device

Tool preferences — password length, character sets, passphrase word count, and similar settings — are saved in your browser's localStorage so they persist between visits. This data never leaves your device, is not readable by other websites, and disappears if you clear your browser data.

Your rights under GDPR and similar laws

If you are in the European Economic Area or the UK, you have rights of access, rectification, erasure, and objection over personal data. This site holds no server-side personal data about you, so in most cases there is nothing for me to retrieve or delete — the data that does exist sits in cookies on your device (which you control directly) and in the ad and analytics platforms listed above (whose opt-outs are linked above). If you believe this site has handled your data in a way these mechanisms don't cover, email me and I will investigate.

Children

This site is not directed at children under 13, and because it collects no personal information from anyone, it does not knowingly collect any from children either.

External links

Guides on this site link to outside resources (standards documents, breach-checking services, and similar). Once you leave passwordmake.com, the destination site's privacy practices apply, not this policy.

When this policy changes

If I add a script, drop one, or change what anything collects, this page gets updated and the date at the top changes. I don't retroactively expand collection — the promise about generated passwords never leaving your browser is the foundation of the site and is not going to change.

Questions

Email contact@passwordmake.com or use the contact page. Privacy questions go to me, Luiz Torres — the developer who runs the site — not a support queue.