Secret Key Generator

Privacy Policy

Privacy policy for Secret Key Generator
Jan 13, 2026

Introduction

Secret Key Generator (secretkeygenerator.com) is a collection of client-side tools for generating JWT, HMAC, API, webhook, and session secrets. This Privacy Policy explains what information we collect, how we use it, and the safeguards we apply. By using our site you consent to the practices described here.

What We Do Not Collect

  • No key transmission: Every generator runs locally in your browser using the Web Crypto API. Generated secrets are never uploaded, logged, or stored by us.
  • No accounts: We do not offer user accounts or require you to submit personal data to use the tools.
  • No image or document uploads: The site handles only random byte generation; there is no media processing.

Information We Collect

We collect only the data needed to operate and improve the service:

  1. Anonymous usage analytics – High-level metrics such as page views, feature clicks, and referral sources collected via privacy-focused analytics. These metrics help us understand which generators and guides are most helpful.
  2. Technical telemetry – Browser type, device type, language, and approximate region derived from HTTP headers to debug performance issues and size infrastructure. This telemetry does not include precise location data.
  3. Server logs – Standard web server logs containing IP address, user agent, and timestamps retained for a short period (typically 30 days) to detect abuse and ensure platform stability.

Cookies and Local Storage

Secret Key Generator strives to minimize client-side storage. We may set first-party cookies or local storage entries to remember interface preferences (theme, locale, or last-used generator settings) and to prevent abuse (e.g., rate limiting). These values never include your generated secrets.

Data Security and Retention

  • Generated keys stay in-memory in your browser; clearing the page or closing the tab removes them.
  • Analytics and log data are hosted on reputable infrastructure providers (e.g., Vercel, Cloudflare, or comparable services) with access restricted to authorized maintainers.
  • We retain aggregated analytics indefinitely to observe long-term trends, and delete raw server logs after the retention window noted above unless a longer period is required for security investigations.

Information Sharing

We do not sell or rent your information. We may disclose limited data only when:

  • Complying with applicable laws, regulations, or valid legal requests.
  • Preventing or investigating suspected fraud, abuse, or security incidents.
  • Operating essential third-party infrastructure (hosting, CDN, analytics) under contractual confidentiality obligations.

Children’s Privacy

The service is intended for users aged 13 and above. We do not knowingly collect personal information from children. If you believe a child has provided information, please contact us so we can remove it promptly.

Changes to This Policy

We may update this Privacy Policy to reflect new features, legal requirements, or operational changes. The “created_at” date above indicates the latest revision. Material updates will be announced on this page and, when feasible, via on-site notices.

Contact Us

Questions about privacy or data handling can be sent to:

Thank you for trusting Secret Key Generator with your security workflows.