Privacy policy
This policy explains how the Password.lt service handles browser-generated values, device preferences and technical information.
Last updated: 28 October 2026
Browser generation
Passwords, passphrases and PINs generated by the website are created locally using Web Crypto. The browser does not send generated values or fragment inputs to the generation API. Loading pages and assets, downloading selected wordlists, opening usage statistics and following links still involves ordinary network requests.
Local storage and history
The browser stores functional preferences such as language, theme and generation settings in localStorage. It does not persist generated values or required/excluded fragments. Optional generation history exists only in the current page’s memory. Clear your browser’s site data to remove saved preferences; reload the page to clear in-memory history.
Clipboard and downloads
Copying places the selected value in your device’s clipboard. To attempt clearing it after 60 seconds, the site asks for clipboard read access and compares the current clipboard value with the one it copied. The comparison remains local. Clearing can be blocked or delayed by the browser and does not delete system clipboard history. Downloaded files remain where you save them until you delete them.
Server API and MCP
API and MCP requests are processed on the server. The application returns generated values without intentionally storing them or logging response bodies. Your client, its provider, proxies or monitoring systems may retain requests and responses. Generation options placed in URL query strings can appear in access logs; use POST for private inputs.
Technical logs and statistics
Hosting servers process IP addresses, requested URLs, timestamps, user-agent information and error information to deliver and protect the service. The application also keeps SHA-256 hashes of visitor IP addresses, first/last-seen timestamps and usage counters. These hashes are not treated as anonymous data. Browser-generated values are not counted in generation totals.
Purpose and retention
Technical information and limited usage statistics support service delivery, abuse prevention and maintenance, based on the operator’s legitimate interests in running and protecting the service. Visitor hashes and timestamped application statistics currently remain until removed during maintenance; aggregate counters may be retained longer. Hosting log retention is governed by the hosting configuration. Contact the operator for details or a deletion request.
Providers and external services
The website links to its hosting provider, FreeHosting.lt. Hosting providers process technical requests needed to serve the site. Cloudflare provides traffic delivery and security and may process IP addresses and request metadata. API security checks may also use Cloudflare Turnstile when enabled. This application does not add advertising trackers. External websites and MCP/client providers apply their own privacy policies.
Your choices and rights
You can disable or clear browser history, remove local preferences through browser settings, and decide whether to permit clipboard access. Depending on applicable law, you may request access, correction, deletion, restriction or object to processing, and complain to a data-protection authority. Send privacy requests to the contact address below; do not include passwords in your message.
Contact
Service operator: Password.lt
info@password.lt