Privacy Policy

Last Updated: September 22, 2026

PasswordIdeas ("we", "us", "our") builds free security tools that run in your web browser. This policy explains what information is and is not processed when you visit passwordideas.net, including the analytics and advertising services that keep the site free.

1. What you enter in our tools never leaves your device

Passwords, passphrases, PINs, usernames, text you encrypt, images you clean, WiFi details and anything else you type or generate in our tools are processed locally by code running in your browser. We do not receive, log, store or sell this data, and it is never passed to our analytics or advertising partners.

  • Generators: passwords, passphrases, PINs and usernames are created on your device with the Web Crypto API.
  • Strength tester and entropy calculator: every calculation happens locally.
  • Hash generator and text encryption: hashing, encryption and decryption run in your browser.
  • EXIF remover and WiFi QR generator: your images and network details are never uploaded.

When you close or reload the page, anything you generated is gone unless you copied it yourself.

2. Password Leak Checker

The Password Leak Checker uses the k-anonymity model of the Have I Been Pwned service. Your browser computes a SHA-1 hash of the password and sends only the first 5 characters of that hash to the Have I Been Pwned API. The API returns a list of matching hash suffixes, and your browser checks locally whether yours is among them. Your password, and its full hash, never leave your device.

3. Information collected automatically

Like every website, our hosting provider and our content delivery network (Cloudflare) process technical data needed to deliver pages securely, such as your IP address, browser type and the page you requested. This data is used for security, abuse prevention and reliability, and it is kept only for a short time in server logs.

4. Analytics

We use Google Tag Manager and Google Analytics to understand, in aggregate, which pages and tools are used and how quickly pages load. These services may set cookies and receive your IP address, device and browser details, and the pages you visit. Our analytics code only sends page views, tool names, numeric settings (such as a chosen password length) and page speed measurements. It never sends anything you type or generate in a tool. You can opt out with the Google Analytics opt-out browser add-on.

5. Advertising (Google AdSense)

To keep our tools free, we display advertising provided by Google AdSense. Please note:

Where the law requires it, including in the European Economic Area, the United Kingdom and Switzerland, we ask for your consent before personalized ads or non-essential cookies are used, and you can change your choice at any time. If you do not consent, Google may still show non-personalized ads, which use cookies only for purposes such as frequency capping, aggregated reporting and fraud prevention.

Advertisers never receive anything you type or generate in our tools.

6. Cookies and local storage

  • Preferences: your theme, language and tool settings (for example, password length) are saved in a cookie or in your browser's local storage so the site remembers them. They never contain passwords or other secrets.
  • Contact form: a short-lived session cookie protects the contact form against spam and forged submissions.
  • Analytics cookies: set by Google Analytics, as described in section 4.
  • Advertising cookies: set by Google and its partners, as described in section 5.

You can block or delete cookies in your browser settings. Our tools keep working without them.

7. Contact form

If you write to us through the contact form, we receive the name, email address and message you submit so that we can reply. The form is protected by Cloudflare Turnstile, which checks that the request comes from a person rather than a bot. We use your message only to answer you and never add you to a mailing list.

8. Affiliate links

Some pages recommend security products through clearly labelled affiliate links. If you click one, the partner may use a cookie to record that you arrived from PasswordIdeas, which can earn us a commission at no extra cost to you. We do not share any other information with these partners.

9. Children's privacy

Our tools are made for a general audience and are not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has sent us personal information through the contact form, contact us and we will delete it.

10. Your rights

Depending on where you live, including under the GDPR, the UK GDPR and the CCPA, you may have the right to access, correct or delete personal information about you, or to object to its processing. Because we hold very little information, most requests concern contact form messages or cookies. Use the opt-out links above for analytics and advertising, or contact us about anything else.

11. Changes to this policy

We update this policy when our tools or partners change. The date at the top of this page shows the latest revision.

12. Contact us

Questions about this policy or our privacy practices? Send us a message through the contact form, linked in the footer of every page.