Privacy policy

The short version

The password generator itself collects nothing. Every password, passphrase, and PIN is created on your own device using your browser's Web Crypto API. Nothing you generate is transmitted, stored, logged, or visible to us. The website around the tool, however, uses cookies for advertising and analytics, like most free websites do.

So we can't honestly say "we collect no data." We can say the sensitive part, the passwords, never reaches us, and the rest of this page explains what the surrounding website does. You can read more about how the generation works in our guide on whether online password generators are safe.

Passwords and generator data

No password, passphrase, PIN, Wi-Fi network name (SSID), or QR code content ever leaves your browser. Generation runs entirely on your device and makes zero network requests, which you can verify yourself in your browser's DevTools Network tab while using the strong password generator.

One tool is different, and we want to be upfront about it. The memorable password generator sends the single word you type into it to the Datamuse dictionary API to fetch related words. That request contains only that seed word, never a generated password, and the password itself is still assembled on your device. If you would rather make no network requests at all, use any of the other generators, or use the memorable tool while offline, where it falls back to words picked locally.

The session history shown under the generator lives only in the memory of your open tab. Close the tab and it's gone. It is never written to disk and never sent anywhere. The one thing the site stores on your device is your light or dark theme preference, saved in localStorage so the page remembers it on your next visit. That value contains no personal information.

Advertising (Google AdSense)

This site displays ads through Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and other sites on the internet.

You may opt out of personalized advertising by visiting Google Ads Settings. You can also opt out of some third-party vendors' use of cookies for personalized advertising at www.aboutads.info.

Analytics (Google Analytics)

We use, or plan to use, Google Analytics 4 to understand aggregate traffic: which pages get visited, roughly where visitors come from, and what devices they use. Google Analytics sets cookies and collects device, browser, approximate location, and page view data. It does not see anything you generate with the tools.

Google explains how it handles this data at How Google uses information from sites that use its services. If you'd rather not be counted, you can install the Google Analytics opt-out browser add-on. We have IP anonymization enabled, so full IP addresses are not stored in our analytics reports.

Consent

If you visit from the European Economic Area, the United Kingdom, or Switzerland, you'll see a consent banner before any advertising or analytics cookies are set, as required by Google's EU User Consent Policy. Decline, and those cookies stay off. Residents of US states with privacy laws can use the "Do Not Sell or Share My Personal Information" controls in the same banner.

Your rights

Under the GDPR and similar laws, you have the right to access the personal data we hold about you, to have it corrected or erased, and to object to how it's processed. In practice we hold very little: the generator keeps nothing, so requests usually concern advertising or analytics cookies, which the links above let you control directly.

To exercise any of these rights, email us at support@passwordrangers.com and we'll respond within 30 days. For data held by Google (advertising and analytics), Google is the relevant controller, and their settings pages linked above are the fastest route.

Data we receive directly

The only personal data we receive directly from you is whatever you choose to send us by email: your address and the contents of your message. We use it to reply and for nothing else. We don't run accounts, newsletters, or contact forms, and we never ask for passwords. If you ever receive an email asking for one in our name, it's not from us.

Changes to this policy

If we change how the site handles data, for example when we enable ads or analytics, we'll update this page and change the date at the top. Meaningful changes get a plain-language note here, not buried edits. The core promise won't change: generation stays entirely in your browser.

Contact

Questions about this policy or anything else on Password Rangers? Email support@passwordrangers.com. We read everything, though replies can take a few days.