Privacy
Passlore is built so there’s almost nothing to tell you: your passwords never reach us.
Last updated · Passlore
What leaves your device
The short version
Passlore generates passwords in your browser. No generated password, and no password you check, is ever sent to Passlore or stored on a server we run.
What stays on your device
Generated passwords, your settings and the drawer (this tab’s history). The drawer is plain text in this tab’s session storage, holds the last 20 items and is erased when the tab closes. Your theme and analytics choice are kept in local storage so they persist between visits. The clipboard is cleared after 60 seconds only if you turn that on.
The optional breach check
Only when you press it, your browser computes a SHA-1 hash of the password and sends the first 5 of its 40 characters to Have I Been Pwned (a third-party service). The match happens on your device. Have I Been Pwned’s own privacy terms apply to that request.
Analytics, only with your consent
If you choose “Allow”, Google Analytics counts page visits along with standard browser details such as device type and approximate region. Passwords, site rules you paste and network names are never included. If you decline, nothing is collected and the site works exactly the same. Google keeps analytics data for no more than 14 months, and Passlore stores none of it on servers of its own.
Hosting
The site is served by Cloudflare, which may process standard request data such as IP address and browser type to deliver pages and prevent abuse. Cloudflare’s own privacy policy covers how long it keeps that data.
Your rights and contact
You can change your analytics choice below at any time. For questions or requests, contact privacy@passlore.com.
Your analytics choice
You haven’t chosen yet, so nothing is collected.