Privacy Policy
Last updated: January 2026Introduction
At HSM Kit, we take your security and privacy seriously. This Privacy Policy outlines how we handle data when you use our online cryptographic tools.
Client-Side Processing
We do not collect, store, or transmit your input data. All cryptographic operations (encryption, decryption, hashing, key formatting) are performed entirely within your web browser using JavaScript. Your keys, PINs, and data never leave your device and are never sent to our servers.
All cryptographic operations run 100% in your browser. Your data never touches our servers.
Data Collection
We do not track or store any personal information.
- Usage Analytics: We may use anonymous analytics tools (e.g., Google Analytics) to track page views and site performance. These tools do not have access to the data you input into the calculation forms.
- Local Storage: We use your browser's Local Storage to save your interface preferences (such as Dark Mode settings, language selection, recently used tools, and input history). This data is stored entirely on your device and is not transmitted to us.
Progressive Web App (PWA)
HSM Kit uses Service Worker technology to enable offline access and faster loading. The Service Worker caches static assets (HTML, CSS, JavaScript) on your device. No user input data is cached by the Service Worker.
Data Retention
Since we do not collect any user data on our servers, there is no server-side data retention. All locally stored preferences (localStorage) remain on your device until you clear them manually through your browser settings.
Your Rights (GDPR)
If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:
- Right to Access — You can request a copy of any personal data we hold (which is none, as we do not collect data).
- Right to Erasure — You can clear all locally stored data at any time by clearing your browser's localStorage.
- Right to Data Portability — Your locally stored preferences can be exported via browser developer tools.
- Right to Object — You may disable analytics tracking through your browser's Do Not Track setting or by using ad blockers.
Third-Party Services
Our website is hosted on a public cloud provider. While we do not collect data, standard server logs (IP addresses, user agents) may be processed by the hosting provider for security and maintenance purposes.
Changes to This Policy
We may update this Privacy Policy from time to time. We encourage you to review this page periodically for any changes.
Contact Us
If you have any questions about this Privacy Policy, please contact us at [email protected]