Privacy Policy — Passwords 4 Free

This Privacy Policy explains how Kokal Operations Ltd ("we", "us", "our") collects, uses, and protects information relating to visitors of passwords-4-free.com (the "Site"). We are registered in England and Wales. This policy is written in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data controller

The data controller is Kokal Operations Ltd. If you have any questions or wish to exercise your rights, you may contact us at [email protected].

2. What data we collect

2.1 Data we do not collect

The password tools on this Site (generator and analyser) run entirely in your browser. No password, partial password, input, or output from those tools is ever transmitted to our servers. We cannot see, store, or process any password you type or generate.

2.2 Server logs

Our hosting provider may collect standard web server logs, which include your IP address, browser type, referring URL, pages visited, and timestamps. These logs are retained for up to 30 days for security and diagnostic purposes and are not used for profiling or marketing.

2.3 Cookies

We use a single essential cookie (p4f_cookie) to store your cookie consent preference in your browser's local storage. This is not a tracking cookie. See our Cookie Policy for full details.

2.4 Contact form

If you contact us via email or the contact form, we collect your name, email address, and the content of your message. This data is used solely to respond to your enquiry and is retained for up to 24 months unless you request deletion.

3. How we use your data

We use the limited data we collect for the following purposes:

Operating and maintaining the Site
Responding to enquiries
Diagnosing technical issues
Meeting legal obligations

We do not sell your data to third parties, use it for advertising, or share it with anyone except as required by law or described in this policy.

4. Affiliate links

Some articles on this Site contain affiliate links to products or services. When you click an affiliate link and make a purchase, we may receive a small commission at no additional cost to you. Affiliate links are provided by third-party affiliate networks. Those networks may set their own cookies when you click a link; please consult the relevant network's privacy policy. Our affiliate relationships do not influence our editorial content.

5. Third-party services

The Site is hosted on a third-party hosting platform. No analytics, advertising, or social media tracking scripts are loaded on this Site. We do not use Google Analytics, Facebook Pixel, or any similar service.

6. Your rights

Under UK GDPR, you have the following rights:

Right of access — to obtain a copy of the personal data we hold about you.
Right to rectification — to have inaccurate data corrected.
Right to erasure — to request deletion of your personal data, subject to our legal obligations.
Right to restriction — to restrict the processing of your data in certain circumstances.
Right to data portability — to receive your data in a structured, machine-readable format.
Right to object — to object to processing based on legitimate interests.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

7. Data retention

Contact messages and associated data are retained for up to 24 months. Server logs are retained for up to 30 days. Data held in connection with legal obligations is retained for as long as the obligation requires.

8. Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or alteration. However, no method of transmission over the internet is completely secure.

9. Changes to this policy

We may update this policy from time to time. Changes will be reflected in the "Last updated" date at the top of this page. Continued use of the Site after a change constitutes acceptance of the updated policy.

10. Complaints

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk.