Privacy Policy

Your secret stays on your device.

Effective November 4, 2026.

Authentication secrets

Secret keys and generated codes are processed in browser memory. They are not sent to a server, written to logs, or stored in cookies, localStorage or a database. The input is cleared after successful generation.

QR images

Images you select, drop or paste are read directly on your device. They are not uploaded or saved to persistent browser storage. Decoded secrets are used only as code-generation input. Clearing or leaving cancels image reading and releases application references to the image.

Clearing and leaving

Clear input removes all active keys. Remove deletes an individual result. Leaving the page releases application references to the keys. Browser garbage collection controls physical memory cleanup, so immediate erasure cannot be guaranteed.

Hosting and clipboard

The hosting provider receives ordinary page requests, which may include your IP address and browser metadata. Secrets are not part of those requests. Copy writes the selected code to your system clipboard; your operating system may retain clipboard history.

Cookies, analytics and advertising

The public generator loads no analytics or third-party advertising scripts. The administrator area uses Cloudflare Access login cookies to protect access; Cloudflare processes the administrator email and login events. Banner images uploaded by the administrator and website settings are stored by Cloudflare. This does not include visitors’ QR images, authentication secrets or generated codes. The browser stores only your light/dark appearance preference in localStorage; authentication secrets and codes are never stored there. Reserved banner placements show placeholders until configured by the operator. Configured banner images are served from this website; clicking a banner may open an advertiser website. Future advertising integrations require a privacy and security review.