Privacy Policy
In short: Refract does not collect, store or share any of your personal data. Every password, passphrase, PIN, number, name pick and QR code is generated on your own device and is never sent to us or anyone else. We have no accounts, no advertising and no tracking.
Who we are
Refract is a free project by The Wadrup Project. You can contact us at thewadrupproject@gmail.com or @wadrupproject on X.
What you generate
All results are created in your browser using its built-in cryptographic random number generator (crypto.getRandomValues). They exist only on your screen and in anything you copy them into. We never receive, see or store them, and they are cleared when you close the page or popup.
Information stored on your device
To save you setting things up each time, Refract remembers a few preferences in your own browser:
- Generator settings, such as password length, which character types to include and passphrase options.
- The name list you type into the name picker.
- Whether sound and haptics are on.
These are stored only in your browser's local storage (or Chrome's extension storage for the extension). They never leave your device, and you can clear them at any time by clearing your browser's site data or removing the extension. Refract never stores generated passwords, passphrases or PINs.
The website (refract.page)
- Hosting: the site is hosted by Netlify. Like any web host, Netlify processes standard request information (such as IP address and browser type) to deliver the page, and provides us with anonymous, aggregate visit counts from its server logs. We do not use cookies, tracking pixels or third-party analytics scripts.
- QR code tool: when you open the QR code tool, your browser loads a small open-source code library from cdnjs (Cloudflare). This request does not include anything you type.
- Fonts are served from refract.page itself, not from a third party.
The Chrome extension
The extension works entirely offline. All of its code, fonts and libraries are bundled inside it, and it never contacts a server. It asks for these permissions:
- contextMenus: adds the "Refract" option to the right-click menu on text boxes.
- activeTab and scripting: when, and only when, you choose a Refract option from the right-click menu, Refract fills the text box you right-clicked (and an empty "confirm password" box in the same form). It does not read the page's content and does not run on any page otherwise.
- storage: saves your generator settings on your device, as described above.
- clipboardWrite: lets the Copy buttons put a result on your clipboard when you click them.
Refract's use of information complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. Because we do not collect user data, we do not sell, transfer or share it for any purpose.
Children
Refract is suitable for all ages and collects no personal information from anyone, including children.
Changes to this policy
If we ever change how Refract handles data, we will update this page and its effective date before the change takes effect.