Privacy Policy

1. What this policy covers

This policy covers Lyn Password Generator, both the app and the web version, and the website lynsoftware.com. It explains what information is processed, why, and where it ends up. It does not cover Lyn Calorie.

2. The app

The app for phones and computers works entirely on your device:

• The password is calculated on the device, with Argon2id
• Your master password and seed only exist in the device's memory while you use them
• Generated passwords are not stored and are not sent anywhere
• The app needs no internet connection and contacts no servers

The app only remembers your settings on the device: password length, special characters, whether the password is shown, theme and language.

3. The web version of the password generator

The web version calculates the password on our server, not in your browser. When you press Generate:

• Your master password, seed, length and special character choice are sent encrypted (HTTPS) to the server
• The server calculates the password with Argon2id and sends it back to your browser
• None of this is stored or written to logs
• We only count how many passwords have been generated in total, with nothing that can be linked to you

If you want your master password never to leave your device, use the app.

4. Cookies

The website only uses cookies it needs to work. None are used for analytics, tracking or advertising.

• The theme and language you have chosen
• The password generator's settings: length, special characters and whether the password is shown. Never your master password, seed or password
• A security cookie that stops other websites from submitting forms in your name
• A sign-in cookie, for our administrators only

5. Support

When you send us a request, we store your email address, the title, category, description and any images you attach. We use them only to answer you and fix problems. You can ask us to delete your request at any time.

6. Security and abuse

To protect the service, the server processes your IP address and browser name for each request, for example to limit the number of attempts and stop attacks. When there is suspicious activity, the IP address is stored so it can be blocked. Requests are logged (IP address, browser, the address without parameters and the response) on our servers at UpCloud and deleted after 30 days.

7. Where information is processed

Our servers and database are hosted by UpCloud in Norway, and our files by UpCloud in Finland. Support email is sent through Brevo. We use no analytics tools or advertising networks, and we never sell information.

8. Children

We do not knowingly collect information about children under 13. The password generator can be used by anyone.

9. Changes

When this policy changes, the new version is published here with a new date at the top.

10. Contact

Questions about privacy, or a request to delete a support request: