1. Local Browser-Only Password & Credential Privacy
The Pass Key (thepasske.com) is engineered on a strict Privacy by Design and Zero-Knowledge architecture. When you use our Password Generator, Passphrase Generator, PIN Generator, or Password Strength Checker:
- All generation and strength calculations execute 100% locally inside your web browser using
window.crypto.getRandomValues(). - Generated or typed passwords, PINs, and passphrases are never transmitted to our servers or any third party.
- Credential values are never stored, logged, placed in analytics events, written to cookies, saved in
localStorageorsessionStorage, or appended to URLs.
2. Technical Log Data & Consent-Gated Analytics
When your browser requests a static web page from our hosting infrastructure, standard web server logs may temporarily process routine HTTP metadata — such as IP address, browser user-agent, requested URL path, HTTP status code, and timestamp — strictly for DDoS mitigation, security monitoring, and error troubleshooting.
Optional Analytics Consent: Google Analytics 4 (GA4) is blocked by default and loads only if you explicitly click "Accept" on our cookie preference banner. When consented, it records aggregated page-view navigation metrics and never has access to password generator outputs or strength-checker inputs. You can withdraw or update your consent at any time on our Cookie Policy page.
3. Regional Privacy Rights (USA, Canada, UK & European Union)
Because The Pass Key does not require user accounts, does not collect personal registration data, and never sells or shares personal information, our service provides strong privacy protections across major international jurisdictions:
- European Union, EEA, Switzerland & United Kingdom (GDPR, UK GDPR & ePrivacy Directive): In accordance with GDPR Article 25 (Data Protection by Design and by Default) and Article 6(1)(a), non-essential analytics cookies are strictly opt-in prior to loading. Users in the EU, EEA, Switzerland, and the UK have the right to access, rectify, erase, or restrict processing of any personal data (for example, if you email our support address).
- United States (CCPA / CPRA & State Privacy Laws): Under the California Consumer Privacy Act (CCPA/CPRA), Virginia CDPA, Colorado CPA, and similar US state privacy statutes, The Pass Key does not sell or share personal information for cross-context behavioral advertising and collects zero sensitive personal information.
- Canada (PIPEDA & Provincial Privacy Legislation): In compliance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec Law 25, we practice strict data minimization and require meaningful opt-in consent before enabling optional analytics cookies.
4. Contacting Us About Privacy
If you have any questions about this Privacy Policy or wish to exercise a data privacy right (such as requesting deletion of an email inquiry you sent us), please contact us at contact@thepasske.com or visit our Contact page.