Privacy

The homepage generator uses the Web Crypto API in your browser. Secrets are not transmitted, stored, or logged by this site.

The optional REST API and MCP server create secrets on the server for that request only. Responses are sent with Cache-Control: no-store. Values are not written to disk or analytics. Those endpoints are rate-limited (60 requests per minute per IP).

We do not use accounts, cookies for tracking, or a database. Vercel Web Analytics records cookieless, aggregated page views. Standard request metadata may appear in hosting logs (IP, user agent, path) for operations. Application errors are sent to Sentry with request bodies and generated secrets stripped. Session replay is not enabled.

Auth Secret is made by Egger & Co.