Privacy Policy
Last Updated: November 5, 2025
TL;DR - We Collect NOTHING
Your passphrases never leave your device. No tracking. No analytics. No data collection. Period.
Our Privacy Commitment
PassphraseForge is a 100% client-side passphrase generator. We take privacy seriously and have designed our application to collect ZERO user data.
Data Collection
What we collect: NOTHING
- ❌ No personal information
- ❌ No IP addresses
- ❌ No usage analytics
- ❌ No tracking cookies
- ❌ No server logs of generated passphrases
Data Storage
Where your data lives: YOUR BROWSER ONLY
- ✅ All passphrase generation happens locally in your browser
- ✅ History is stored in your browser's IndexedDB (never sent to servers)
- ✅ No data leaves your device
- ✅ No server-side storage or databases
Third-Party Services
Services we use: NONE
- ❌ No analytics (Google Analytics, Vercel Analytics, etc.)
- ❌ No tracking pixels
- ❌ No advertising networks
- ❌ No social media integrations that track you
Your Rights
Since we don't collect any data about you:
- ✅ There's nothing to delete
- ✅ There's nothing to export
- ✅ There's nothing to correct
- ✅ You have complete control - your browser is the only place your data exists
Browser Storage
PassphraseForge uses IndexedDB (local browser storage) to store your passphrase history. This storage:
- Persists only in YOUR browser
- Is never transmitted to any server
- Can be cleared at any time through your browser settings
- Is managed entirely by you
Changes to This Policy
If we ever need to collect data (which we have no plans to do), we will:
- Update this privacy policy
- Clearly notify users on the homepage
- Obtain explicit consent before collecting anything
Verification
PassphraseForge is built with privacy-first principles. All code runs in your browser, and you can verify this yourself.
How to Verify
- Open your browser's developer tools (press F12)
- Go to the Network tab
- Generate passphrases and observe - no requests are made to external servers
- Check the Application tab → IndexedDB to see your history is stored locally only
- All cryptographic generation uses the Web Crypto API (crypto.getRandomValues())
Questions?
If you have questions about this privacy policy, please review the Privacy link in the footer or contact us through the website.