Privacy policy

Last updated: 2026-11-01

This policy explains what happens to data when you use the tools on this site. The short version: the tools themselves do not collect or store anything you type. The site does show third-party advertising, which uses cookies as described below.

What the tools do with your input

All three tools process your input in your browser. Two of them make the network requests described here:

• Post-quantum size comparator processes everything locally. Nothing you type is transmitted off your device or stored.
• Password crack-time estimator processes your sample locally, including the check against its built-in list of common leaked passwords, which is downloaded to your browser. Nothing is transmitted unless you press Check Pwned Passwords: that sends the first five characters of the sample's SHA-1 hash to Have I Been Pwned (api.pwnedpasswords.com), which returns every hash suffix sharing that prefix so the match is made in your browser. The sample itself and its full hash never leave your device.
• CVE risk triage sends the CVE ID you enter to two public services to retrieve published data about it: the NVD (nvd.nist.gov), FIRST EPSS (first.org), and it loads a locally cached copy of the CISA Known Exploited Vulnerabilities catalog. Only the CVE ID is sent; no personal information is involved.

Advertising and cookies

This site uses Google AdSense to display ads, which keeps the tools free. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites.

• Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and other sites on the internet.
• You can opt out of personalized advertising by visiting Google Ads Settings.
• You can opt out of a third-party vendor's use of cookies for personalized advertising at aboutads.info/choices.
• Third-party vendors and ad networks may also be listed in this site's ads.txt file.

Analytics and logs

The web server hosting this site may keep standard access logs (IP address, page requested, time, user agent) for security and operational purposes. These are not used to identify individuals and are not sold or shared.

Your choices

You can disable cookies in your browser settings, and you can use the tools without accepting advertising cookies (the tools still function). Users in regions with applicable privacy laws (such as the GDPR or CCPA) may exercise their rights by writing to the address on the Contact page.

Changes

This policy may be updated; the date at the top reflects the latest revision.