Passwords are generated and assessed locally without persistent storage. Breach checks send only a five-character SHA-1 hash prefix to Have I Been Pwned as you type. Full passwords are never sent. Font Awesome loads from cdnjs. These services receive your IP address. Copied passwords enter your clipboard. No analytics or advertising.