Local processing and privacy

What happens to the values you type and generate on this site.

Passwords and inputs: Generated values and anything you type into a tool are processed in your browser (in a Web Worker for heavy operations). The application has no feature that sends them to a server.
Randomness: All random values come from the browser’s Web Crypto CSPRNG. If it is unavailable the operation fails instead of falling back to a weaker source.
Files: Files you hash are read into memory in the browser (max 10 MiB) and are not uploaded.
Stored preferences: Your theme, sidebar and cookie choice are kept in localStorage. Secrets and results are never stored.
Analytics and ads: Google Analytics 4 (visit statistics) and the Meta Pixel (ad measurement) load only after you click “Accept” in the cookie banner; until then, and if you reject, no third-party script runs and no tracking cookie is set. When accepted, they receive the page address, browser and device information and an anonymous visitor ID, and set their own cookies. What you type into the tools and their results are never sent to them; Meta’s automatic button and form data collection is turned off. You can change your choice at any time with “Cookie settings” at the bottom of the page.
Network: Page files (HTML, JavaScript, CSS, fonts) are loaded from this site’s server like any website. Apart from the services above, which load only with your consent, there are no third-party scripts.
Limits: JavaScript cannot guarantee constant-time execution, and a compromised device or browser extension can read what you type. Use a password manager to store generated passwords.