Privacy Policy
Last updated: 2026-03-15
Your Privacy Matters
PassCraft takes your privacy seriously. All password generation and analysis happens entirely in your browser using JavaScript and the crypto.getRandomValues() API. We never see, store, or transmit any passwords, passphrases, PINs, or API keys you generate or check. This is not just a policy statement — it is technically enforced by the client-side architecture of our tools.
What We Collect
PassCraft does not collect personal information. We use Google Analytics 4 for anonymous usage statistics — which pages are visited and which tools are used most often, but never what passwords are generated or what values are analyzed. GA4 is configured with IP anonymization so your IP address is never stored in identifiable form. You can opt out via the Google Analytics Opt-out Browser Add-on.
Cookies
PassCraft does not set first-party cookies. Google Analytics sets cookies (such as _ga) to distinguish sessions and measure site usage. Google AdSense may set cookies to deliver and measure advertisements. You can block or manage these cookies through your browser settings without affecting the security tools' functionality.
Advertising
We use Google AdSense to display advertisements that help keep PassCraft free. Google AdSense may use cookies for ad personalization based on your browsing history. You can opt out of personalized advertising at Google Ad Settings.
Third-Party Services
Our only third-party service integrations are Google Analytics and Google AdSense, both governed by Google's Privacy Policy. We do not sell or share any data with other parties.
Children's Privacy (COPPA)
PassCraft is not directed at children under 13. We do not knowingly collect personal information from children. Our tools require no registration or personal data. If a parent or guardian believes their child has submitted personal information via our contact form, please contact us to have it removed.
Data Retention
Because PassCraft collects no personal data, there is nothing to retain or delete. Anonymized analytics data follows Google's standard retention schedule. Contact messages are retained only as long as needed to respond to your inquiry.
Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of PassCraft after changes are posted constitutes acceptance of the updated policy.
Contact
Questions? Contact us.