Contents
1. Who We Are
FreeStrongPassword.com is operated by Kokal Operations Ltd, registered in England and Wales. We are the data controller for all personal information collected through this website.
Contact: [email protected] · Data protection: [email protected]
2. What Data We Collect
What we do NOT collect
- Passwords — all generation runs in your browser; passwords never reach our servers.
- Keystroke data — we do not monitor typing.
- Device fingerprints — we do not fingerprint browsers or devices.
Data collected automatically
Our hosting provider (GitHub Pages) logs standard server access data including IP address, browser type, pages visited, and timestamps. We do not use this data to identify individuals.
Data you provide voluntarily
- Contact form: Name, email address, subject, and message.
- Newsletter: Email address (if you subscribe).
- Cookie preferences: Stored locally in your browser only.
3. How We Use Your Data
| Purpose | Data Used | Retention |
|---|---|---|
| Responding to contact enquiries | Name, email, message | 12 months |
| Newsletter communications | Email, name | Until unsubscribed |
| Website security | IP address (server logs) | 30 days |
| Analytics (consent only) | Anonymised usage data | 26 months |
4. Legal Basis (UK GDPR)
- Legitimate interests (Article 6(1)(f)): Responding to enquiries, maintaining site security.
- Consent (Article 6(1)(a)): Analytics cookies, marketing communications.
- Legal obligation (Article 6(1)(c)): Compliance with applicable law.
5. Cookies
We use minimal cookies. Your consent choice is stored in your browser's localStorage under fsp-ck and is never transmitted to any server. See our Cookie Policy for full details.
6. Third-Party Services
- Google Fonts: Font files loaded from Google CDN. Google may log font requests.
- GitHub Pages: Hosting provider — may process connection data.
- Affiliate partners: Clicking affiliate links may allow partners to set their own cookies. See our Affiliate Disclosure.
7. Data Retention
Personal data is kept only as long as necessary. Contact form data is deleted after 12 months. Server access logs are typically retained 30 days by our hosting provider.
8. Your Rights Under UK GDPR
You have the right to: access your data · correct inaccurate data · request deletion · restrict processing · data portability · object to processing. Email [email protected] to exercise any right. We respond within 30 days.
9. Children's Privacy
Our services are not directed at children under 13. We do not knowingly collect data from children. Contact us immediately if you believe a child has provided personal information and we will delete it.
10. Contact & Complaints
Privacy queries: [email protected]
You may also contact the UK Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.