This policy explains how valsec.pro ("valsec", "we") handles information when you use the site.
1. Your tool input stays on your device
Every tool on valsec runs entirely in your browser. Text, passwords, tokens and files you paste are processed locally and are never uploaded to or stored on our servers. The only exception is the optional breach check, which queries the Have I Been Pwned k-anonymity API using just the first five characters of a SHA-1 hash — your password itself never leaves your device.
2. Information we process
- Technical data: standard server logs (IP address, browser type, pages visited) used to operate and secure the site.
- Cookies: used to run the site and, with your consent, for advertising and measurement (see below).
3. Cookies and advertising (Google AdSense)
We may use third-party advertising providers, primarily Google AdSense, to keep valsec free.
- Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites.
- Google’s use of advertising cookies enables it and its partners to serve ads to you. You can opt out of personalised advertising via Google Ads Settings.
- Advertising and analytics cookies are only activated after you give consent (Google Consent Mode v2). You can decline via the cookie banner.
4. Legal bases (GDPR)
We process technical data under our legitimate interest in operating a secure website, and advertising/analytics data based on your consent. You may withdraw consent at any time.
5. Your rights
Depending on your location (GDPR, and other applicable laws), you have rights to access, correct, delete and object to processing of your personal data. Contact us at hello@valsec.pro.
6. Changes
We may update this policy from time to time. The current version is always published on this page.