PRIVACY POLICY

Effective Date: August 23, 2026
Last Updated: August 23, 2026

1. Who We Are

PasswordMasters (“Password Masters”) is operated by ANSUN Software Corporation (“ANSUN,” “we,” “us,” or “our”). This Privacy Policy applies to PasswordMasters at passwordmasters.com, its installable web/PWA experience, and the Google Play application that displays or runs the PasswordMasters service.

PasswordMasters is designed to keep password-generation and vault-related secrets local to the user’s device.

That local-first design does not mean that no information ever leaves the device. Ordinary web delivery, advertising, analytics, breach checking, and optional support communications involve limited network data as described below.

2. Password and Vault Data We Do Not Intentionally Collect

PasswordMasters does not intentionally transmit to ANSUN, advertising providers, analytics providers, or unrelated third parties:

  • passwords generated by PasswordMasters;
  • passwords manually entered into password-generation or password-analysis features, except for the privacy-preserving breach-check process described in Section 3;
  • master passwords;
  • decrypted password-history or vault contents;
  • encryption keys;
  • clipboard contents; or
  • imported plaintext vault data.

Where PasswordMasters stores password history or vault information locally, that data is intended to remain on the user’s device and is not part of ANSUN’s central user database. PasswordMasters does not maintain a central end-user account database for the current service.

Important: Do not send passwords, master passwords, encryption keys, recovery secrets, or vault contents through our contact form or by email.

3. Breach Checking with Have I Been Pwned

If you choose to check whether a password appears in known breach data, PasswordMasters uses the Have I Been Pwned (HIBP) Pwned Passwords range service.

The password is hashed locally on your device using SHA-1 for the purpose of the HIBP range lookup. PasswordMasters sends only the first five hexadecimal characters of that hash to the HIBP range endpoint. HIBP returns possible matching hash suffixes, and PasswordMasters performs the final comparison locally on your device.

The plaintext password and the full password hash are not sent to HIBP by this process.

4. Information Collected Through the Optional Contact Form

If you choose to use the PasswordMasters contact form, the current production form asks for information such as your name, email address, subject/category, priority, and message. The form also includes a timestamp and browser user-agent information when submitting the request.

The current production contact form uses EmailJS as a message-delivery service. The information you enter is transmitted to EmailJS so that your message can be delivered to PasswordMasters support. If EmailJS delivery fails, PasswordMasters may open your own email application with the message pre-filled so that you can send it directly to support@passwordmasters.com.

Using the contact form is optional and is not required to generate passwords or use the core PasswordMasters features.

5. Analytics — Statcounter

The current production version of PasswordMasters uses Statcounter to understand site/app visits and general usage. The current Statcounter configuration for PasswordMasters uses Statcounter cookies and stores full visitor IP addresses.

Depending on the visit and browser, Statcounter may process information such as:

  • IP address;
  • date and time of a visit;
  • browser and operating-system information;
  • device-related information;
  • referring information;
  • the PasswordMasters page being viewed; and
  • visit or interaction information used to distinguish visits and understand usage.

We use this information for analytics and to understand how PasswordMasters is used. We do not intend to send generated passwords, manually entered passwords, master passwords, vault contents, encryption keys, or clipboard contents to Statcounter.

6. Advertising — Google AdSense

PasswordMasters is supported in part by advertising and currently uses Google AdSense. Google and its advertising partners may process data associated with ad delivery, personalization where permitted, measurement, fraud/abuse prevention, and related advertising functions.

Depending on your region, browser/device, consent choices, and Google’s applicable settings, advertising-related processing may involve information such as IP/network information, browser or device information, cookies or similar online identifiers, approximate location inferred from network information, PasswordMasters page/app interactions, and ad interactions.

For users in regions where Google’s European consent message applies, PasswordMasters currently provides Google-managed consent and “Manage options” controls. A “Privacy and cookie settings” link is also made available so that users can return to the consent controls and change their choices. The specific advertising and partner choices available may vary by region and applicable law.

PasswordMasters does not currently declare the Android Advertising ID permission in its production Google Play artifact.

7. Web Hosting and Technical Request Information

Like other websites and web-delivered applications, PasswordMasters must receive ordinary network requests in order to deliver pages and features. Hosting and network infrastructure may process technical request information such as IP address, requested URL, request time, browser/device information, and related server/security metadata.

We use or retain such information only as necessary for hosting, operation, security, troubleshooting, abuse prevention, and other legitimate operational purposes, subject to the capabilities and settings of our hosting providers. We do not claim a fixed retention period here because the exact historical retention configuration has not been fully verified.

8. Cookies and Similar Technologies

The current production PasswordMasters service uses cookies or similar technologies through third-party services, including Statcounter and Google advertising/consent systems. These technologies may be used for analytics, ad delivery, consent choices, measurement, and related purposes.

Where Google’s privacy and consent controls are available, you may use the “Privacy and cookie settings” control to review or change applicable choices. Browser settings may also let you block or clear cookies, although doing so can affect site behavior or advertising/measurement functionality.

9. How We Use Information

Information described in this policy may be used to:

  • operate and deliver PasswordMasters;
  • respond to support, security, bug-report, feedback, feature-request, or business inquiries;
  • understand aggregate usage and improve the service;
  • provide and measure advertising that supports the service;
  • maintain security, prevent abuse, and troubleshoot technical problems; and
  • comply with applicable legal obligations.

Password and vault secrets described in Section 2 are not intended to be used for advertising or analytics.

10. Service Providers and Third Parties

Current production integrations include:

  • Google AdSense and Google consent/privacy services for advertising, measurement, and consent management;
  • Statcounter for analytics;
  • EmailJS for delivery of optional contact-form messages; and
  • Have I Been Pwned for the privacy-preserving breach-check request described in Section 3.

These providers process information under their own terms, privacy policies, service configurations, and applicable legal obligations. We seek to limit the data sent to these providers to what is needed for the relevant function.

11. Data Retention

Retention depends on the type of information, the reason it is processed, and the configuration or policies of the applicable service provider.

ANSUN does not maintain a central database of generated passwords, master passwords, or decrypted vault contents. Contact communications may be retained as needed to respond to the inquiry and maintain appropriate business/support records. Advertising, analytics, consent, and hosting information may be retained according to the applicable provider configuration and legitimate operational requirements.

We do not state a universal fixed retention period because the exact historical retention periods for all current legacy providers have not been fully verified. As PasswordMasters is modernized, ANSUN intends to reduce unnecessary third-party processing and minimize retention where practical.

12. Data Security

Known current network integrations described in this policy use HTTPS/TLS for data in transit. No method of electronic transmission or storage can be guaranteed to be completely secure, but we use reasonable technical and organizational measures appropriate to the nature of the service.

The strongest privacy boundary in PasswordMasters is architectural: password-generation and vault secrets are designed to remain local rather than being sent to an ANSUN password server.

13. Your Choices and Data Requests

You may choose not to use the optional contact form. Where Google advertising consent controls are available, you may use the displayed privacy/cookie settings to review or change applicable consent choices. You can also manage cookies through your browser or device settings, subject to the limitations of those tools.

To request access to, correction of, or deletion of personal information that ANSUN controls in connection with PasswordMasters, or to ask a privacy question, contact:

support@passwordmasters.com

For step-by-step information about requesting deletion of personal information ANSUN controls, see our PasswordMasters Data Deletion page.

Please include enough information for us to understand and reasonably verify your request, but do not include passwords, master passwords, encryption keys, recovery secrets, or vault contents. We will respond according to applicable law and our technical ability to identify or control the relevant data. Some information may need to be retained for legitimate legal, security, fraud-prevention, or recordkeeping reasons. Where relevant data is controlled by a third-party provider, we may coordinate with that provider or direct you to the provider’s own privacy controls.

14. Users Under 18

PasswordMasters is currently targeted to users 18 years of age and older and is not directed to children. If you believe a minor has submitted personal information through a support channel, contact us at support@passwordmasters.com so we can review the situation.

15. International Processing

The service providers used by PasswordMasters may process data in countries other than your own. Where required, those providers and ANSUN are responsible for using appropriate legal and security measures for applicable cross-border processing.

16. Changes to This Privacy Policy

We may update this Privacy Policy as PasswordMasters, its providers, or legal requirements change. The current version will be posted at the PasswordMasters privacy-policy page with an updated effective date. Material changes to data practices should also be reflected in the Google Play Data Safety declaration where applicable.

17. Contact

ANSUN Software Corporation
PasswordMasters Support and Privacy Requests
support@passwordmasters.com
https://www.passwordmasters.com