Privacy Policy

Last Updated: November 5, 2025

TL;DR - We Collect NOTHING

Your passphrases never leave your device. No tracking. No analytics. No data collection. Period.

Our Privacy Commitment

PassphraseForge is a 100% client-side passphrase generator. We take privacy seriously and have designed our application to collect ZERO user data.

Data Collection

What we collect: NOTHING

  • ❌ No personal information
  • ❌ No IP addresses
  • ❌ No usage analytics
  • ❌ No tracking cookies
  • ❌ No server logs of generated passphrases

Data Storage

Where your data lives: YOUR BROWSER ONLY

  • ✅ All passphrase generation happens locally in your browser
  • ✅ History is stored in your browser's IndexedDB (never sent to servers)
  • ✅ No data leaves your device
  • ✅ No server-side storage or databases

Third-Party Services

Services we use: NONE

  • ❌ No analytics (Google Analytics, Vercel Analytics, etc.)
  • ❌ No tracking pixels
  • ❌ No advertising networks
  • ❌ No social media integrations that track you

Your Rights

Since we don't collect any data about you:

  • ✅ There's nothing to delete
  • ✅ There's nothing to export
  • ✅ There's nothing to correct
  • ✅ You have complete control - your browser is the only place your data exists

Browser Storage

PassphraseForge uses IndexedDB (local browser storage) to store your passphrase history. This storage:

  • Persists only in YOUR browser
  • Is never transmitted to any server
  • Can be cleared at any time through your browser settings
  • Is managed entirely by you

Changes to This Policy

If we ever need to collect data (which we have no plans to do), we will:

  1. Update this privacy policy
  2. Clearly notify users on the homepage
  3. Obtain explicit consent before collecting anything

Verification

PassphraseForge is built with privacy-first principles. All code runs in your browser, and you can verify this yourself.

How to Verify

  • Open your browser's developer tools (press F12)
  • Go to the Network tab
  • Generate passphrases and observe - no requests are made to external servers
  • Check the Application tab → IndexedDB to see your history is stored locally only
  • All cryptographic generation uses the Web Crypto API (crypto.getRandomValues())

Questions?

If you have questions about this privacy policy, please review the Privacy link in the footer or contact us through the website.