GeneratePass
Generate
PRIVACY POLICY

Privacy Policy

Last updated: August 18, 2026. This policy explains how GeneratePass handles data, what third-party services are used, and your rights.

What GeneratePass Is

GeneratePass is a collection of browser-based security tools and educational resources. Most tools run entirely in your browser using the Web Crypto API. No account is required. No data is stored on our servers for tool usage.

Data Collection by Tool Type

Tool Category Data Processed Where Processed External Service
Password Generator None (generates output) Your browser None
Passphrase Generator None (generates output) Your browser None
SHA-256 / Hash Tools User input text or files Your browser None
Breach Checker SHA-1 hash prefix (5 chars) Your browser + HIBP API Have I Been Pwned (k-anonymity)
UUID / Token Generators None (generates output) Your browser None
Contact Form Name, email, message Firebase Firestore Google Firebase

Analytics and Advertising

GeneratePass uses the following third-party services:

Google Analytics

We use Google Analytics to understand how visitors use the site. Google Analytics uses cookies to collect anonymous usage data (pages visited, time on site, browser type). This data is aggregated and cannot be used to identify you personally. You can opt out using the Google Analytics Opt-out Browser Add-on.

Google AdSense

GeneratePass displays advertisements through Google AdSense. AdSense may use cookies and similar technologies to serve relevant ads. Google's advertising policies govern how ad data is collected and used. GeneratePass does not control Google's advertising practices. You can manage ad personalization in your Google Account settings.

Your Rights

Tool usage: Since most tools process data entirely in your browser, there is no personal data to request, correct, or delete. Your tool usage is not tracked or stored by GeneratePass.

Contact form submissions: If you submitted information through the contact form, you can request deletion by contacting us. We will remove your data from Firebase Firestore upon request.

Analytics data: Google Analytics data is controlled by Google. You can opt out using Google's opt-out tools or by disabling cookies in your browser.

Advertising data: Ad personalization data is controlled by Google. Manage your preferences at adssettings.google.com.

Cookies

GeneratePass uses the following cookies and local storage:

localStorage: Theme preference and recent tool history. This data stays on your device and is never transmitted.

Google Analytics cookies (_ga, _ga_*): Anonymous usage tracking. Expires after 2 years.

AdSense cookies: Advertising personalization. Managed by Google.

For more details, see our Cookie Policy.

Children's Privacy

GeneratePass is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will remove it.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the site after changes constitutes acceptance of the updated policy.

Contact

For privacy-related questions or to request data deletion, use the contact form or email us directly. We aim to respond within 5 business days.

PRIVACY RESOURCES

Learn More About Privacy

Explore our educational resources on online privacy, tracking prevention, and data protection.

What is Online Privacy?

Online privacy is the right to control your digital footprint — what information you share, how it is collected, who can access it, and how it is used. In an economy built on data harvesting, privacy is not about having something to hide; it is about maintaining autonomy over your personal information.

Every website you visit, search query you make, product you view, and message you send generates data. Advertising networks, data brokers, social media platforms, and even your internet service provider aggregate this data to build detailed profiles of your behavior, interests, relationships, and location.

Online privacy is the practice of minimizing this data collection, encrypting your communications, and maintaining control over your digital identity. It is a fundamental right recognized by the UN and protected by regulations like GDPR and CCPA.

Privacy Threats You Face Every Day

Modern privacy threats are invisible, pervasive, and automated. Here is what happens when you browse the web:

Tracking

Cross-Site Tracking

Third-party cookies and tracking pixels follow you across websites, building a complete profile of your browsing history. Advertising networks like Google, Meta, and hundreds of others correlate your behavior across millions of sites.

Fingerprinting

Browser Fingerprinting

Even without cookies, websites can identify you by your browser's unique combination of screen size, fonts, plugins, timezone, language, hardware, and GPU. This creates a persistent identifier that survives cookie deletion.

Data Collection

Mass Data Collection

Social media platforms, search engines, and apps collect vast amounts of personal data — location, contacts, messages, photos, purchase history, and health information. This data is sold to advertisers and sometimes leaked in breaches.

Surveillance

ISP and Network Surveillance

Your internet service provider can see every website you visit, every DNS query you make, and the timing and volume of your traffic. In many jurisdictions, this data is retained and available to government agencies.

Browser Security and Privacy Settings

Your browser is the primary interface between you and the web. Configuring it correctly is the single most impactful step you can take for online privacy.

Recommended Browsers

  • Firefox — Strong tracking protection, open-source, highly configurable
  • Brave — Built-in ad/tracker blocking, fingerprinting protection
  • Tor Browser — Maximum anonymity through onion routing

Essential Settings

  • Block third-party cookies
  • Enable Enhanced/Strict Tracking Protection
  • Disable autofill for sensitive data
  • Use DNS-over-HTTPS (DoH)
  • Install uBlock Origin and Privacy Badger

Essential Privacy Tools

Client-side tools to check your exposure and measure entropy — no data leaves your browser.

Auditor

Breach Checker

Check if your passwords or emails have appeared in known data breaches using k-anonymity.

 Calculator

Entropy Calculator

Measure the information entropy of passwords and secrets to understand their true randomness.

Featured Articles

Guide

Online Privacy Checklist

50 steps to protect your digital life, from browser settings to VPNs.

Read more → Deep Dive

Browser Fingerprinting

How websites identify you without cookies and what you can do about it.

Read more → Analysis

Public WiFi Security

How to stay safe on open networks and protect your data.

Read more → Tutorial

Tracking Technologies

Cookies, pixels, and beyond — how tracking works online.

Read more → Checklist

Data Breaches Explained

How breaches happen and what to do when your data is exposed.

Read more → Comparison

Browser Security Basics

Essential browser settings for protecting yourself online.

Read more →

Privacy Threats Comparison

Threat Mechanism Detectable? Prevention
Cross-Site Cookies Third-party cookies track across domains Yes Block third-party cookies, use extensions
Browser Fingerprinting Unique device/browser configuration Partial Use Tor, resist fingerprinting settings
Supercookies Hidden in headers, ETags, HSTS Difficult Private browsing, clear site data
Canvas Fingerprinting Rendering differences in canvas elements Partial Block canvas readout, use extensions
WebGL Fingerprinting GPU rendering characteristics Partial Disable WebGL or use spoofing extensions
ISP Snooping DNS and traffic analysis by ISP No Use VPN, DNS-over-HTTPS, Tor
Location Tracking IP geolocation, GPS, WiFi positioning Yes VPN, disable location permissions

Privacy Protection Checklist

Action Priority
Block third-party cookies Critical
Use a privacy-focused browser Critical
Install uBlock Origin Critical
Use encrypted messaging (Signal) High
Enable DNS-over-HTTPS High
Use a reputable VPN Medium
Review app permissions regularly Medium
Use private/incognito browsing Medium

Frequently Asked Questions

What is online privacy? ▾
Online privacy is the ability to control what personal information you share on the internet and who has access to it. It encompasses data collection practices, tracking prevention, communication encryption, and the right to browse without surveillance.
What is browser fingerprinting? ▾
Browser fingerprinting is a tracking technique that identifies you based on your browser configuration — screen resolution, installed fonts, plugins, timezone, language settings, and more. Unlike cookies, fingerprints cannot be cleared and persist across sessions.
Do VPNs really protect my privacy? ▾
VPNs encrypt your internet traffic and hide your IP address from websites and your ISP. However, they shift trust to the VPN provider. Choose a no-log VPN provider, and understand that VPNs do not protect against tracking cookies, browser fingerprinting, or logged-in services.
What is the difference between privacy and security? ▾
Security protects data from unauthorized access (hackers, breaches). Privacy controls how your data is collected, used, and shared by the services you use. You can have secure systems that violate your privacy (encrypted data collection), and private systems that are insecure.
How can I check if my data has been breached? ▾
Use Have I Been Pwned to check your email against known breaches. Our client-side breach checker tool can also verify passwords using k-anonymity without transmitting your actual data. Enable breach notifications for real-time alerts.
Which browser is best for privacy? ▾
Firefox with strict tracking protection, Brave with built-in ad/tracker blocking, or Tor Browser for maximum anonymity. All three offer superior privacy to Chrome. Configure your browser to block third-party cookies and fingerprinting.
What is end-to-end encryption? ▾
End-to-end encryption (E2EE) ensures that only the sender and intended recipient can read a message. Not even the service provider can access the plaintext. E2EE is used in Signal, WhatsApp, and encrypted email providers like ProtonMail.

Related Topics

Category

Password Security

Password generation, strength analysis, breach detection, and credential management best practices.

 Category

Cryptography

Hash functions, encryption algorithms, encoding standards, and the math behind secure systems.

 Category

Authentication Security

MFA, passkeys, biometrics, and the future of identity verification beyond passwords.

 Category

Online Safety

Comprehensive digital safety covering phishing, malware, social engineering, and identity theft prevention.
🛡️

GeneratePass Team

The GeneratePass team builds browser-based security tools and writes educational guides focused on local execution and client-side data sovereignty.