RandPass

Privacy Policy

Introduction

At RandPass, we are committed to protecting your privacy. This Privacy Policy explains our data practices, including what limited information we collect and why we request certain permissions for our browser extension.

Our philosophy is simple: we collect only the minimal data necessary for the extension to function properly. We believe your passwords and personal information should remain private and under your control.

Data Collection

RandPass does not collect, store, or transmit any of your personal data or generated passwords. All password generation happens locally on your device, and we do not track your usage or behavior.

What We Collect

  • Nothing - We do not collect any personal information, usage statistics, or analytics data.

What We Do Not Collect

  • Passwords - Generated passwords remain on your device and are never transmitted to our servers.
  • Browsing History - We do not track which websites you visit.
  • Personal Information - We do not collect names, email addresses, or any other personal identifiers.
  • Analytics - We do not use analytics tools to track how you use the extension.

Required Permissions

RandPass requires a minimal set of permissions to function properly. Here's why we need each permission:

"storage" Permission

This permission allows RandPass to save your password generation preferences (such as length, character types, etc.) locally on your device. This ensures your settings persist between browser sessions, providing a consistent experience without requiring you to reconfigure the extension each time you use it.

Security Note: All settings are stored locally in your browser's secure storage area and are never transmitted to external servers.

"clipboardWrite" Permission

This permission allows RandPass to copy generated passwords to your clipboard with a single click. This is essential for the extension's core functionality, as it enables you to easily paste generated passwords into login forms without manually selecting and copying them.

Security Note: RandPass only writes to your clipboard when you explicitly click the "Copy" button. We never read from your clipboard or access clipboard data you've copied from other sources.

"audio" Permission

This permission allows RandPass to play a brief audio notification sound when a password is successfully generated and copied to your clipboard. This provides immediate feedback that the operation was completed successfully.

Security Note: The audio permission is only used to play notification sounds and does not access your microphone or record any audio from your device. RandPass only plays sounds when you explicitly perform an action that requires notification.

Host Permissions

RandPass requests limited host permissions to enable the auto-fill functionality on websites where you want to use generated passwords. This allows the extension to identify password fields on web pages and fill them with your generated passwords when requested.

Security Note: We use these permissions only for the purpose of identifying password fields and auto-filling them when explicitly requested. RandPass does not monitor your browsing activity, collect form data, or transmit any information about the websites you visit.

Our Security Commitment

Security is at the core of RandPass's design. Here's how we ensure your data remains secure:

  • Local Processing: All password generation happens locally on your device using the Web Crypto API, which provides cryptographically secure random number generation.
  • No Server Communication: RandPass does not send or receive data from any servers during normal operation.
  • Open Source: Our code is open source and available for review on GitHub, ensuring transparency about our data practices.
  • Regular Updates: We regularly update RandPass to address any security vulnerabilities and ensure compatibility with the latest browser versions.

Contact Us

If you have any questions or concerns about our privacy practices, please contact us through our GitHub repository:

GitHub Issues