Privacy Policy

Last updated: October 31, 2025

Overview

At EveryPasswordSucks, your privacy is our top priority. This Privacy Policy explains how we collect, use, and protect your information when you use our password testing tool.

TL;DR: Your passwords never leave your device. We use basic analytics to improve the site, but we never see or store the passwords you test.

Password Testing

Your passwords are 100% private:

  • All password analysis happens entirely in your browser using JavaScript
  • Your password is NEVER transmitted over the internet
  • Your password is NEVER sent to our servers or any third-party servers
  • Your password is NEVER stored, logged, or saved anywhere
  • When you close or refresh the page, the password is immediately cleared from memory

We have no technical ability to see the passwords you test. The analysis tool runs completely client-side using the open-source zxcvbn library.

Analytics & Cookies

We use Google Analytics to understand how people use our site. This helps us improve the tool and create better content. The analytics we collect include:

  • Page views and navigation patterns
  • Device type and browser information
  • General location (country/city level, not precise)
  • How you arrived at our site (referrer)
  • Button clicks and interactions (but NOT password content)

What we DON'T collect:

  • Your password or any characters from it
  • Your personal identity
  • Your email address or contact information
  • Your precise location

Affiliate Links

We use affiliate links to recommend password manager services. When you click these links, the password manager company may set cookies to track the referral. We may earn a commission if you sign up.

These third-party services have their own privacy policies. We encourage you to review them:

  • 1Password Privacy Policy
  • LastPass Privacy Policy
  • Dashlane Privacy Policy

Third-Party Services

Our website uses the following third-party services:

  • Netlify: Website hosting (privacy policy at netlify.com/privacy)
  • Google Analytics: Usage analytics (privacy policy at google.com/analytics/terms)
  • CDN Providers: For loading JavaScript libraries (zxcvbn, anime.js)

Your Rights

You have the right to:

  • Use our tool without creating an account or providing personal information
  • Block cookies and analytics using browser settings or extensions
  • Request information about any data we may have collected
  • Request deletion of any data (though we don't collect passwords)

Children's Privacy

Our service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us.

Security

We use HTTPS encryption to secure the connection between your browser and our website. This prevents anyone from intercepting data transmitted between us.

However, since your password never leaves your device, even a compromised connection couldn't expose it.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy or how we handle data, please contact us.

Technical Details (For the Curious)

If you're technically inclined, you can verify our privacy claims:

  • Open your browser's Developer Tools (F12)
  • Go to the Network tab
  • Test a password on our site
  • You'll see NO network requests containing your password
  • All processing happens in the browser's JavaScript engine

You can also review the source code of the zxcvbn library we use at GitHub.