Privacy Policy

Operator and scope

RandomStrongPasswordGenerator.com is operated personally by Gabor Kohanyi. Correspondence address: Hova House, 1 Hova Villas, Brighton & Hove, East Sussex, BN3 3DH, United Kingdom. Privacy contact: contact 'at' randomstrongpasswordgenerator 'dot' com.

This policy applies to the public website, its content pages and the isolated tools served from secure.randomstrongpasswordgenerator.com. It does not control external websites linked from articles or resource pages.

No account registration or password collection

You do not need an account to browse the site or use its tools. The password, passphrase, PIN, random-string and strength-checking interfaces run in your browser on a separate secure origin. They are designed not to submit generated or entered secrets to the main site, analytics, advertising systems or a server-side application endpoint.

Secret values are not placed in URLs, cookies, local storage, session storage or parent-window messages. The main page can receive only an allowlisted action name and frame-height information. Copying and local file creation occur after your browser action. The secure origin does not load Google Analytics, Google AdSense, a consent platform, marketing scripts or remote executable dependencies.

Ordinary request and security data

Normal web infrastructure still processes request metadata needed to deliver and protect the site. This can include an IP address, date and time, requested URL, HTTP method and status, referrer, browser user agent, protocol details, approximate network location, security signals and error information. These records must not contain generated passwords because tool values are not sent as requests.

The purposes include delivering pages, maintaining availability, detecting abuse, diagnosing faults, enforcing security controls and preserving evidence of attacks. Access is limited to operational need. Retention should be no longer than required for security, diagnostics, legal obligations and backup cycles, and may vary between the origin host and security provider.

Hosting and infrastructure providers

The website uses DigitalOcean cloud infrastructure in Amsterdam and Cloudflare for content delivery and security protection. These providers may process request metadata on the operator’s behalf or under their own applicable terms. Cloudflare may use necessary cookies or similar signals to distinguish legitimate requests from automated abuse.

Cloud services can involve international processing and support operations. The providers describe their data handling, safeguards and locations in their own legal documentation. This policy does not claim that every request remains in one country.

Consent management

Where consent is required, Google Privacy & Messaging presents and manages the consent notice for Google Analytics and Google AdSense. The website does not display a separate home-made cookie selector or store a second copy of the visitor’s advertising preferences.

The Google message records and communicates the visitor’s decision to participating services. The available controls can vary by region and applicable requirements. Necessary delivery and security functions operate separately from advertising consent.

Google Analytics

Google Analytics may process page addresses, browser and device information, approximate location derived from an IP address, referral information and limited interaction events to help understand aggregate use and improve content. It is activated only when the required permission has been communicated through Google’s consent system.

Generated values, entered passwords, strength results, entropy results and custom character pools are excluded from analytics events. Google Analytics never runs on the isolated secure tool origin.

Google AdSense

Google AdSense may display advertising on eligible content pages. Google’s certified consent platform manages the required advertising notice and communicates the visitor’s decision to Google and participating advertising partners. Ads are not shown on error pages or on the isolated secure tool origin.

When advertising is active, Google and its partners may process cookies, device identifiers, IP addresses and page context for ad delivery, measurement, fraud prevention and permitted personalization. Advertising systems cannot access passwords or other secret values handled inside the isolated tools.

Contact messages

If you contact the operator, the message, sender details and related correspondence are processed to answer the request, handle a correction, protect the service, address a legal notice or comply with an obligation. Do not send confidential credentials. Correspondence is retained only while needed for the request, a reasonable record of decisions, security evidence or legal requirements.

The site does not provide a web contact form. The published email is written in a spam-resistant, non-clickable form.

Purposes and legal grounds

Depending on the visitor’s location and the activity, processing may rely on consent for optional analytics and advertising, legitimate interests in secure and reliable operation, steps taken at the requester’s direction, or compliance with legal obligations. Necessary security interests are balanced against visitor rights and limited to proportionate data.

Withdrawal of optional consent does not affect processing that was lawful before withdrawal. Mandatory consumer and privacy rights are not limited by this policy.

Your privacy rights

Applicable law may provide rights to ask for access, correction, deletion, restriction, portability or objection, and to withdraw consent. Rights are not absolute and depend on the data, purpose and jurisdiction. You may also complain to a competent supervisory authority.

Send a request through the published contact method and describe the relevant visit or correspondence. The operator may ask for proportionate verification when needed to protect another person’s data. Because no user account exists and ordinary logs may not reliably identify one visitor, some data may not be locatable without additional details.

Children, external links and security

The service is a general password utility and is not directed to young children. It does not knowingly ask children to create accounts or submit personal profiles. A parent or guardian can contact the operator about a concern.

External sites have their own policies. The operator selects links for relevance but does not control their data practices. Technical, organizational and access safeguards reduce risk, but no website, device or transmission method is perfectly secure. Protect your device, browser, clipboard and recovery channels.

Policy changes

This policy may change when providers, features or legal requirements change. Material changes will be published on this page with an updated review date. Contact the operator if a statement appears inconsistent with the way the website behaves.