Privacy policy
Last updated: October 18, 2026
This policy applies to the website www.createpass.net, to the Createpass: Password Generator app for Android (package net.createpass.www.twa) and to the Createpass widget for Windows. The app and the widget show the same service as the website, so everything below applies to all three.
1. Who is responsible
Createpass.net is published by Olivier Muhleisen, who is responsible for the processing described here. Contact: contact@1avance.com.
2. The passwords you generate
Passwords and passphrases are generated on our server with a cryptographically secure random source, sent to you once over an encrypted HTTPS connection and then discarded. They are never written to a log, a database or a file, never linked to you and never sent to a third party. The regenerate button in the page works entirely inside your browser. The Windows widget fetches a fresh password from the same server in the same way, and nothing is kept either.
We do not ask for an account, a name, an email address or any other information to use the generator.
3. Technical data received by the server
Like any website, our server receives technical information with each request: IP address, date and time, requested page, browser type and referring page. The content of the forms, including the options you choose, is not recorded. This information is used only to deliver the pages, keep the service secure and diagnose errors. The site is hosted by OVH SINGAPORE PTE. LTD., which processes it on our behalf.
4. Audience measurement: Google Analytics
We use Google Analytics 4, provided by Google, to count visits and understand how the site and the app are used (pages viewed, approximate location at country or city level, device and browser type, events such as the display or dismissal of the install banner and the installation of the app). Google Analytics uses cookies and receives your IP address, which Google does not store in Google Analytics 4. The data is processed by Google, including outside the European Union, under the European Commission standard contractual clauses and the EU-US Data Privacy Framework. Analytics data is kept for a maximum of 14 months, and the Google Analytics cookies expire after at most 2 years.
You can block Google Analytics with your browser cookie settings or with the Google Analytics opt-out browser add-on. More information: Google privacy policy.
5. Advertising: Google AdSense
The site and the app display ads served by Google AdSense, which helps keep the generator free. To show these ads, Google and its advertising partners receive technical data such as your IP address, device and browser type and the page you are viewing, and may use cookies or similar identifiers to deliver ads, limit how often the same ad appears, measure ad performance and prevent fraud. If you allow it, ads can also be personalised according to your interests, based on your visits to this and other websites. The passwords you generate are never shared with Google or any advertising partner.
In the European Economic Area, the United Kingdom and Switzerland, a consent message managed by Google lets you accept or refuse personalised ads and the related cookies, and you can change your choice at any time. Everywhere, you can turn off personalised ads in Google ad settings. More information: how Google uses data for advertising.
6. Data stored on your device
Apart from the Google Analytics and Google AdSense cookies described above, the site stores one value in your browser local storage: the date on which you dismissed the install banner or installed the app, so that the banner is not shown again for 30 days. It contains no personal information and never leaves your device. A service worker keeps a copy of the home page so that the app can open without a connection. You can delete both by clearing the site data in your browser.
7. The Android app
The Android app is a Trusted Web Activity: it opens www.createpass.net in Chrome or your default browser, full screen and without the address bar. The only permission it declares is notifications. It has no access to your contacts, photos, files, location, camera or microphone. The data processing is exactly the one described in this policy, and your browser settings (cookies, site data) apply inside the app. Uninstalling the app removes it from your device.
8. Sharing of data
We do not sell, rent or exchange any data. The only recipients are our host OVH for the technical data of section 3, and Google for audience measurement and advertising as described in sections 4 and 5.
9. Children
The service is intended for a general audience and is not directed at children under 13. We do not knowingly collect personal data from children.
10. Your rights
Under the General Data Protection Regulation, you have the right to access, correct and delete your data, to object to or restrict its processing and to withdraw your consent at any time. As we do not know who you are, most of the data concerned is held by Google and can be managed directly with the tools linked above. For any other request, write to contact@1avance.com. You may also lodge a complaint with the French data protection authority, the CNIL, or with the authority of your country.
11. Security
The whole site is served only over HTTPS with HSTS, so the passwords and pages you receive cannot be read or altered in transit.
12. Changes to this policy
If this policy changes, the new version is published on this page with a new update date. See also our cookie information and our terms of use.