Privacy Policy

Last updated: 3 June 2026

Overview

Summary: No keys, passwords, or tokens are ever collected. All generation is client-side using crypto.getRandomValues(). We only hold data if you choose to contact us.

Data Controller

Kokal Operations Ltd, registered in England and Wales.

What We Collect

What we do NOT collect: Keys, passwords, tokens — all generation is client-side. Nothing is sent to any server.

Automatic logs: GitHub Pages logs: IP, browser type, pages visited, timestamps. Retained 30 days.

Lawful Basis

PurposeDataBasisRetention
Site securityIP, server logsLegitimate interests30 days

Third Parties

Your Rights (UK GDPR)

Access, rectify, erase, restrict, object, or port your data.

This site uses cookies for essential functionality only. No personal data is sold or shared.