Privacy Policy
Last updated: 3 June 2026
Overview
Summary: No passwords are ever collected. All generation is client-side using
crypto.getRandomValues().Data Controller
Kokal Operations Ltd, registered in England and Wales.
What We Collect
What we do NOT collect: Passwords — all generation is client-side. Nothing is sent to any server.
Automatic logs: GitHub Pages logs: IP, browser type, pages visited, timestamps. Retained 30 days.
Lawful Basis
| Purpose | Data | Basis | Retention |
|---|---|---|---|
| Site security | IP, server logs | Legitimate interests | 30 days |
Third Parties
- Google Fonts — font CDN
- GitHub Pages — hosting
Your Rights (UK GDPR)
Access, rectify, erase, restrict, object, or port your data.
Complaints
UK ICO: ico.org.uk · 0303 123 1113
This site uses cookies for essential functionality only. No personal data is sold or shared.
