Erzo's free security tools are designed with privacy as a core principle. Here's how we handle your data:
Client-Side Tools (No Data Sent)
The following tools run entirely in your browser. Your data never leaves your device:
- Password Strength Tester — all analysis happens locally
- Hash Generator — hashes computed via Web Crypto API
- Base64 Encoder/Decoder — pure JavaScript processing
- SRI Hash Generator — fetches the URL directly from your browser
Server-Side Tools (Minimal Data Processing)
These tools require server-side processing. We follow strict data handling practices:
- Header Checker, SSL Checker, Email Security — we query the domain you provide. No data is stored.
- security.txt Validator — we fetch the security.txt file. No data is stored.
- Secret Scanner — code is analyzed server-side and immediately discarded. Never stored.
- Data Breach Checker — we check the email hash against known breach databases. Your full email is never stored.
Key Principles
- No user accounts required to use free tools
- No cookies or tracking on tool pages
- No data is stored, logged, or sold
- All server-side requests are processed and immediately discarded
- Rate limiting is applied to prevent abuse
For our full privacy policy, see our Privacy Policy.