Passwords never leave your browser
Every password on MySmartPassword.com is generated locally, on your device, by JavaScript running in your browser using its cryptographically secure random number generator (crypto.getRandomValues). Generated passwords are never sent to our server or anywhere else, and we never store them. When you close or reload the page, they are gone.
No accounts, no advertising
We do not ask for any personal information. There are no accounts, no forms and no advertising on this site.
Visit statistics
To understand how many people use the site and which pages they open, we use Yandex Metrica, a web analytics service provided by Yandex. Its script is loaded from mc.yandex.ru and collects anonymous usage data: pages visited, clicks, time on the site, referring page, approximate location derived from the IP address, and browser and device type. Yandex processes this data according to its own privacy policy.
Session recording is switched off, and the statistics never include the generated passwords: they exist only on the page in your browser. You can block the counter with any content blocker or with Yandex’s own Metrica opt-out browser add-on; the generator works the same without it.
Cookies
We use two small functional cookies of our own, only to remember your choices:
msp_settings— your generator settings (uppercase letters, special characters, excluded similar characters, phonetics language);msp_lang— the site language, if you picked one in the language menu.
They contain no identifiers and no passwords and are kept for one year. Yandex Metrica sets its own cookies (their names start with _ym) to tell new visitors from returning ones. You can delete all of these cookies at any time in your browser settings; the site will simply return to the default settings.
Server logs
Like almost every website, our web server keeps a standard access log. For each request it records the IP address, date and time, the address of the requested page or file, the response status and size, the referring page, and the browser’s user-agent string. Passwords and generator settings never appear in these logs, because passwords are created in your browser and are not part of any request.
The logs are used only to keep the site running and to protect it from abuse. They are deleted automatically after about ten days and are not shared with anyone or combined with any other data.
Changes
If this policy ever changes, the updated version will be published on this page.