Privacy Policy

Last updated: 25 October 2026

This Privacy Policy explains what information GenPass (“we”, “us”, genpass.in) collects when you use the website, how it is used, and the choices you have.

1. Data you enter into the tools

Our generators, checkers and converters run in your browser. Passwords, PINs, passphrases, text, JSON, regular expressions and other data you type into a tool are processed on your device and are not sent to or stored on our servers.

One tool makes an external request by design. The Password Breach Checker sends the first five characters of the SHA-1 hash of the password you check to the Have I Been Pwned “Pwned Passwords” API (api.pwnedpasswords.com). Your password and its full hash never leave your device. See Have I Been Pwned’s privacy policy.

2. Accounts and the encrypted vault

Creating an account is optional. If you register, we store your username, email address and a securely hashed version of your password in order to provide the account. Vault entries are encrypted in your browser with a key derived from your master password (Argon2id and AES-GCM) before being saved. If you enable cloud sync, only this encrypted data is uploaded; we cannot read it, and we cannot recover it if you forget your master password. You can ask us to delete your account at any time via the contact page.

3. Information collected automatically

Like most websites, our hosting provider records standard server logs (IP address, browser type, pages requested, date and time) for security and troubleshooting. We use Google Analytics through the Google Site Kit plugin to understand, in aggregate, which pages are visited and how the site is used.

4. Advertising and cookies

We use Google AdSense to show ads. Google and its partners use cookies to serve ads based on your previous visits to this and other websites.

• Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the internet.
• You can opt out of personalised advertising by visiting Google Ads Settings. You can also opt out of some third-party vendors’ use of cookies for personalised advertising at aboutads.info.
• Learn more in How Google uses information from sites that use its services.

Where required by law (for example for visitors in the EEA, the UK or Switzerland), we ask for your consent before personalised ads or non-essential cookies are used. Ads never have access to data you enter into our tools.

You can block or delete cookies in your browser settings. The tools will continue to work without them.

5. How we use information

• To operate, secure and improve the website and its tools.
• To provide accounts and sync for users who choose them.
• To respond to messages you send us.
• To show advertising that funds the free service.

We do not sell personal information.

6. Data retention

Account data is kept until you delete your account. Server logs and analytics data are retained for a limited period by our hosting and analytics providers according to their own retention settings.

7. Your rights

Depending on where you live, including under the GDPR and India’s Digital Personal Data Protection Act 2023, you may have the right to access, correct or delete your personal data, or to withdraw consent. To make a request, contact us using the details on our contact page.

8. Children

GenPass is not directed at children under 13, and we do not knowingly collect personal information from them.

9. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top shows when it was last changed.

10. Contact

Questions about this policy? Email us at rajesh2004dev@gmail.com.