We use no cookies whatsoever. The only data stored is in your browser's local storage, and it never leaves your device.

This site uses the browser's localStorage API to remember two things:

• cookieConsent — Records that you accepted the cookie banner so we don't show it again. Value: "accepted"
• disclaimerDismissed — Records that you dismissed the disclaimer so you don't see it every page load. Value: "1"

Why local storage and not cookies?

Unlike cookies, local storage data is never automatically sent to any server with each request. It stays entirely in your browser. This means we never see it, never collect it, and never process it on our end. It's purely for your convenience so the site remembers your preferences between visits.

How to clear it

You can clear this data at any time by opening your browser's developer tools (F12), going to Application → Local Storage, and deleting the entries. Or just clear your browser data for this site.

• No tracking cookies — We don't set any cookies at all, not even session cookies.
• No analytics — We don't use Google Analytics, Plausible, Matomo, or any other analytics tool. We have zero visibility into who visits this site.
• No third-party data sharing — No data about you is ever sent to advertisers, data brokers, or any third party.
• No fingerprinting — We don't collect browser fingerprints, screen resolution, installed fonts, or any other identifying information.
• No ad networks — This site has no ads and doesn't load any third-party advertising scripts.
• No social media trackers — No Facebook pixels, Twitter embeds, or share buttons that track you.

The only third-party services loaded on this site are:

PayPal (donation button)

Loaded from paypal.com and paypalobjects.com. PayPal may set their own cookies if you interact with the donation button. We don't control PayPal's data practices. If you don't click the donate button, no PayPal scripts execute.

Bootstrap Icons (icon font)

Loaded from cdn.jsdelivr.net. This is just a CSS file for icons. No tracking, no cookies, no scripts.

Tor2web gateways (address checking)

When you use the generator, your browser makes requests to tor2web proxy services (like onion.ly, onion.sh, etc.) to check if .onion addresses are online. These are standard HTTPS requests. We don't control these services and they may log requests.

If you submit a .onion address through the form, the following happens:

• The address is sent to our server over HTTPS
• It's validated server-side (must be a valid v3 .onion format)
• It's checked against our content filter
• If it passes, it's stored in a public GitHub repository

We don't collect or store any personal information with your submission. No IP addresses are stored permanently. Rate limiting is done in-memory and resets when the server restarts.