Contents
1. Who We Are
BestPasswordGenerator.org is operated by Kokal Operations Ltd, a company registered in England and Wales. We are the data controller for personal information collected through this website.
Contact: [email protected] · For data protection queries: [email protected]
2. What Data We Collect
2.1 Data we do NOT collect
- Generated passwords — all password generation runs client-side in your browser. No passwords are ever transmitted to our servers.
- Device fingerprints — we do not fingerprint browsers or devices.
- Keystroke data — we do not monitor or log keystrokes.
2.2 Data collected automatically
When you visit our website, our hosting provider (GitHub Pages / Cloudflare) may automatically log standard server access data including your IP address, browser type, operating system, pages visited, and timestamps. This data is collected by infrastructure operators and is not controlled directly by us. We do not use this data for individual profiling.
2.3 Data you provide voluntarily
- Contact form: Name, email address, subject, and message content.
- Email newsletter: Email address and name (if you subscribe).
- Cookie preferences: Your consent choice is stored locally in your browser (localStorage).
3. How We Use Your Data
| Purpose | Data Used | Retention |
|---|---|---|
| Responding to contact form enquiries | Name, email, message | 12 months from last contact |
| Sending requested newsletters or updates | Email address, name | Until unsubscription |
| Website security and fraud prevention | IP address (server logs) | 30 days |
| Analytics (only with cookie consent) | Anonymised usage data | 26 months |
| Legal compliance | As required by law | As required by law |
4. Legal Basis for Processing (UK GDPR)
- Legitimate interests (Article 6(1)(f)): Responding to enquiries, maintaining site security, improving our services.
- Consent (Article 6(1)(a)): Analytics cookies, marketing communications. You may withdraw consent at any time.
- Legal obligation (Article 6(1)(c)): Compliance with applicable UK and EU law.
5. Cookies and Tracking
We use a minimal cookie approach. Essential cookies are required for the site to function. Optional analytics cookies are only set with your explicit consent. See our Cookie Policy for a full list of cookies used.
Your consent preference is stored in your browser's localStorage under the key bpg-ck. This does not transmit data to any server.
6. Third-Party Services
- Google Fonts: Loaded from Google's CDN. Google may log font requests. See Google's privacy policy at policies.google.com.
- GitHub Pages: Our hosting provider. GitHub may process connection data. See GitHub's privacy statement.
- Affiliate partners: Clicking affiliate links may allow third-party partners to set their own cookies. See our Affiliate Disclosure for details.
- Contact form processor: Contact form submissions may be processed by a third-party form handler (e.g. Formspree). Data is transferred under appropriate safeguards.
7. Data Retention
We retain personal data only for as long as necessary for the purpose it was collected, or as required by law. Contact form data is deleted after 12 months unless an ongoing relationship exists. Server access logs are typically retained for 30 days by our hosting provider.
8. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right of access — request a copy of data we hold about you
- Right to rectification — correct inaccurate data
- Right to erasure — request deletion of your data ("right to be forgotten")
- Right to restrict processing — limit how we use your data
- Right to data portability — receive your data in a portable format
- Right to object — object to processing based on legitimate interests
- Rights related to automated decision making — we do not use automated decision-making
To exercise any of these rights, email [email protected]. We will respond within 30 days.
9. Children's Privacy
Our services are not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will indicate the date of the most recent revision at the top of this page. Continued use of the website after changes constitutes acceptance of the updated policy.
11. Contact and Complaints
For privacy-related enquiries: [email protected]
You have the right to lodge a complaint with the UK's data protection regulator:
Information Commissioner's Office (ICO)
Website: ico.org.uk · Helpline: 0303 123 1113
