Privacy Architecture

Zero-Log Privacy Policy

Last updated & audited: March 2026

Executive Summary: Zero Passwords Stored, Ever

SecurityTools is engineered from the ground up as a 100% client-side zero-knowledge application. When you test a password in our strength checker, generate a random password, or create a Diceware passphrase, zero bytes of that data ever leave your web browser. We cannot see, log, store, or sell your passwords because we never receive them.

1. Data You Process in Our Tools

All text inputs, evaluated passwords, entropy computations, Diceware seed words, and generated credentials exist solely in your computer’s temporary volatile RAM memory. The moment you refresh the page or close your browser tab, all traces of that data are completely wiped from your machine’s memory.

  • No keystrokes are transmitted over any network socket or HTTP request.
  • No password hashes or plaintext values are sent to any remote API.
  • No local storage (localStorage / IndexedDB) is used to persist credentials.

2. Web Cryptography API & Local Execution

All random number generation utilizes window.crypto.getRandomValues(), a W3C standardized API executed locally by your web browser engine (V8, WebKit, or Gecko). This uses hardware entropy generated directly by your device’s operating system kernel.

3. Cookies & Tracking Pixels

SecurityTools does not use third-party advertising cookies, social media tracking pixels (Facebook/Meta, TikTok, LinkedIn), or invasive session replay tools (such as Hotjar or FullStory). We do not build user behavioral profiles or monetize your browsing activity.

4. Web Server Logs (Static Hosting)

Like all websites, the edge delivery network (CDN) that hosts our static HTML and JavaScript assets automatically records standard technical connection metadata in ephemeral access logs (such as IP address, user-agent string, and requested static file URL). These logs are used strictly for DDoS mitigation and infrastructure security and are automatically purged. These edge logs never contain your tool inputs or passwords.

5. Independent Verification

You do not need to take our word for granted. You can inspect the source code in your browser, audit outbound traffic in your Developer Tools Network tab, or disconnect your internet connection (Airplane Mode) and use every tool on this site with full functionality.

6. Contacting the Privacy Officer

If you have questions about our zero-log architecture, please reach out through our Contact Page or email our security team directly.